My nix-darwin and NixOS config
3
fork

Configure Feed

Select the types of activity you want to include in your feed.

chore: remove docker and claude secret options and sops rules

-38
-8
.sops.yaml
··· 26 26 27 27 creation_rules: 28 28 # ── Secrets available on all machines ────────────────────────────────────── 29 - - path_regex: secrets/(wifi-home|ssh-passphrase|docker-config\.json|claude\.json)$ 30 - key_groups: 31 - - age: 32 - - *ewan 33 - - *macmini 34 - - *laptop 35 - - *server 36 - 37 29 # ── Server-only secrets ───────────────────────────────────────────────────── 38 30 - path_regex: secrets/(pds\.env|cloudflare\.token|cf-tunnel\.json|forgejo\.env|nextcloud-admin-pass|nextcloud-smtp-pass)$ 39 31 key_groups:
-18
home/default.nix
··· 213 213 # Tell the home-manager sops module to decrypt using the host's SSH ed25519 214 214 # key as an age key — same source as the system-level sops in common.nix. 215 215 sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ]; 216 - sops.secrets = lib.mkMerge [ 217 - (lib.mkIf cfg.secrets.docker.enable { 218 - "docker-config" = { 219 - sopsFile = ../secrets/docker-config.json; 220 - path = "${config.home.homeDirectory}/.docker/config.json"; 221 - mode = "0600"; 222 - }; 223 - }) 224 - 225 - (lib.mkIf cfg.secrets.claude.enable { 226 - "claude-config" = { 227 - sopsFile = ../secrets/claude.json; 228 - path = "${config.home.homeDirectory}/.claude.json"; 229 - mode = "0600"; 230 - }; 231 - }) 232 - 233 - ]; 234 216 }
-12
modules/options.nix
··· 389 389 }; 390 390 }; 391 391 392 - # ── Secrets ─────────────────────────────────────────────────────────────── 393 - secrets = { 394 - docker.enable = mkOption { 395 - type = bool; 396 - default = false; 397 - }; 398 - claude.enable = mkOption { 399 - type = bool; 400 - default = false; 401 - }; 402 - }; 403 - 404 392 # ── Server service toggles ──────────────────────────────────────────────── 405 393 services = { 406 394 forgejo.enable = mkOption {