guh

config/modules/secrets/server.nix

@@ -0,0 +1,24 @@
+{ inputs, modules, ... }:
+{
+  modules.sops = {
+    nixos =
+      { ... }:
+      {
+        imports = [
+          inputs.sops-nix.nixosModules.sops
+        ];
+        sops = {
+          # age.keyFile = "/etc/ssh/ssh_host_ed25519_key";
+          defaultSopsFile = ./server.yaml;
+          secrets = {
+            root-hashed_password = {
+              neededForUsers = true;
+            };
+            doloro-hashed_password = {
+              neededForUsers = true;
+            };
+          };
+        };
+      };
+  };
+}