From 7a1bb85a5f65dbcb3df044441dc5fc083942e520 Mon Sep 17 00:00:00 2001
From: Miran Bastaja <miran.bastaja04@gmail.com>
Date: Mon, 21 Oct 2024 15:39:01 +0200
Subject: Client machines: remove sops

---
 hosts/wonderland/sops.nix | 23 -----------------------
 1 file changed, 23 deletions(-)
 delete mode 100644 hosts/wonderland/sops.nix

(limited to 'hosts/wonderland/sops.nix')

diff --git a/hosts/wonderland/sops.nix b/hosts/wonderland/sops.nix
deleted file mode 100644
index 9b76b24..0000000
--- a/hosts/wonderland/sops.nix
+++ /dev/null
@@ -1,23 +0,0 @@
-{ config, ... }:
-{
-  sops = {
-    age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
-    defaultSopsFile = ../../secrets/credentials.json;
-    secrets = {
-      # FIXME: using mode 444 here is a hack so that spotifyd can cat the
-      # values out, but it obviously exposes the secrets to anyone that knows
-      # they are there. A better solution would be to override the spotifyd
-      # module to make the systemd service run the program with a group, and
-      # then give read priviledges to only that group.
-      #      "spotify/password" = {
-      #        mode = "444";
-      #      };
-      #      "spotify/username" = {
-      #        mode = "444";
-      #      };
-      "irc/libera-password" = {
-        owner = config.users.users.alice.name;
-      };
-    };
-  }; # end of sops
-}
-- 
cgit v1.3.1