Modules/Sops: Allow setting secrets with "neededForUsers = true;"

2025-07-09 18:41:03 +02:00
parent 507ac0f8bd
commit a499bbb814
2 changed files with 38 additions and 5 deletions
--- a/system/modules/sops-nix/options.nix
+++ b/system/modules/sops-nix/options.nix
@ -13,4 +13,15 @@
    '';
    default = [];
  };
+
+  bootSecrets = lib.mkOption {
+    type = lib.types.attrsOf (lib.types.listOf lib.types.str);
+    description = "The secrets to expose on this host earlier in the boot process";
+    example = ''
+      christoph = [
+        "user-password"
+      ];
+    '';
+    default = [];
+  };
 }