Modules/Agenix: Add dockerhub credentials

home/christoph/default.nix

@@ -312,7 +312,7 @@
             # If this user defined any secrets...
             (builtins.hasAttr "${username}" nixosConfig.modules.agenix.secrets)
             # ...we will add them to the current secrets.nix,
-            # s.t. agenix can be used to encrypt the secret.
+            # s.t. agenix can be used to encrypt/access them.
             (builtins.concatStringsSep "\n"
               (builtins.map
                 (mkSecret publicKeys.${username}.ssh)

system/default.nix

@@ -25,6 +25,10 @@ with mylib.networking; {
   ];
 
   modules = {
+    agenix.secrets.${username} = [
+      "dockerhub-password"
+    ];
+
     bootloader = {
       enable = true;
 

system/modules/agenix/dockerhub-password.age

@@ -0,0 +1,5 @@
+age-encryption.org/v1
+-> ssh-ed25519 PW+5DQ z6Fm40D2nCJvvFsQdj9V4zcvVBpjFAvLZh17cEtLEx8
+hIyc+AUuEiIv6TobnNawdyEswAAQ4kQeh5n0yaVT/mY
+--- Yhxh9hnsPfHYcmmrpQm5Up0VzRh2ndoF3R3W+7ojW58
+b¸¶àñ?´‚ú Ì™WcÏÿú…­æR•”<‰@þyŽ˜Ðþ1z%ê4EWuÕ7	Œ<¢”¸'ßàCg9!è`cv

system/modules/agenix/options.nix

@@ -5,7 +5,7 @@
 }: {
   secrets = lib.mkOption {
     type = lib.types.attrs;
-    description = "The secret files managed by agenix (and their associated keys)";
+    description = "The secret files managed by agenix (encrypted by SSH key)";
     example = ''
       {
         christoph = [