aboutsummaryrefslogtreecommitdiff
path: root/hosts/wonderland/sops.nix
diff options
context:
space:
mode:
Diffstat (limited to 'hosts/wonderland/sops.nix')
-rw-r--r--hosts/wonderland/sops.nix23
1 files changed, 0 insertions, 23 deletions
diff --git a/hosts/wonderland/sops.nix b/hosts/wonderland/sops.nix
deleted file mode 100644
index 9b76b24..0000000
--- a/hosts/wonderland/sops.nix
+++ /dev/null
@@ -1,23 +0,0 @@
-{ config, ... }:
-{
- sops = {
- age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
- defaultSopsFile = ../../secrets/credentials.json;
- secrets = {
- # FIXME: using mode 444 here is a hack so that spotifyd can cat the
- # values out, but it obviously exposes the secrets to anyone that knows
- # they are there. A better solution would be to override the spotifyd
- # module to make the systemd service run the program with a group, and
- # then give read priviledges to only that group.
- # "spotify/password" = {
- # mode = "444";
- # };
- # "spotify/username" = {
- # mode = "444";
- # };
- "irc/libera-password" = {
- owner = config.users.users.alice.name;
- };
- };
- }; # end of sops
-}