diff --git a/secrets/default.nix b/secrets/default.nix index 9a4db42..5f808f1 100644 --- a/secrets/default.nix +++ b/secrets/default.nix @@ -4,7 +4,9 @@ let inherit (lib.our) mkOpt; inherit (lib.types) bool attrsOf path; - mkSecret = name: nameValuePair (removeSuffix ".age" name) { file = "${./.}/${name}"; }; + mkSecret = name: nameValuePair + (removeSuffix ".age" name) + { file = "${./.}/${name}"; }; secrets = listToAttrs (map mkSecret (attrNames (import ./secrets.nix))); withOwner = name: secret: secret // { owner = name; group = name; }; @@ -18,7 +20,13 @@ in config = mkIf config.modules.secrets.enable { secrets = mapAttrs (n: v: v.path) config.age.secrets; age.secrets = mkMerge [ - { inherit (secrets) "infinidoge-password" "root-password" "binary-cache-private-key"; } + { + inherit (secrets) + "infinidoge-password" + "root-password" + "binary-cache-private-key" + ; + } (mkIf config.services.nginx.enable { "inx.moe.pem" = withOwner "nginx" secrets."inx.moe.pem"; "inx.moe.key" = withOwner "nginx" secrets."inx.moe.key";