2 files changed, 23 insertions, 1 deletions
diff --git a/hosts/sagittarius/default.nix b/hosts/sagittarius/default.nix
index 2e45e03..6ce0492 100644
--- a/hosts/sagittarius/default.nix
+++ b/hosts/sagittarius/default.nix
@@ -1,4 +1,4 @@
-{ ... }:
+{ config, ... }:
 {
   imports = [
     # Include the results of the hardware scan.
@@ -6,6 +6,7 @@
     ./home.nix
     ./ssh.nix
     ./web
+    ./sops.nix
   ];
 
   boot.loader.grub.device = "/dev/sda";
@@ -25,6 +26,17 @@
       routes = [ { Gateway = "fe80::1"; } ];
     };
   };
+  services.comin = {
+    enable = true;
+    remotes = [
+      {
+        name = "origin";
+        url = "https://git.sorre.xyz/miranb/nixos-config.git";
+        branches.main.name = "main";
+        auth.access_token_path = config.sops.secrets."forgejo-access-token/sorre".path;
+      }
+    ];
+  };
 
   # Select internationalisation properties.
   i18n.defaultLocale = "en_US.UTF-8";
diff --git a/hosts/sagittarius/sops.nix b/hosts/sagittarius/sops.nix
new file mode 100644
index 0000000..7e13f78
--- /dev/null
+++ b/hosts/sagittarius/sops.nix
@@ -0,0 +1,10 @@
+{ ... }:
+{
+  sops = {
+    age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
+    defaultSopsFile = ../../secrets/forgejo-access-token.yaml;
+    secrets = {
+      "forgejo-access-token/sorre" = { };
+    };
+  };
+}