feat: sops-nix secrets management

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
Padreug 2026-06-28 06:48:37 +02:00
commit ab550cd0a7
4 changed files with 85 additions and 0 deletions

12
secrets/omni.yaml.example Normal file
View file

@ -0,0 +1,12 @@
# Template secrets file. Copy to secrets/omni.yaml, then encrypt in
# place with sops (uses the recipient in ../.sops.yaml):
#
# cp secrets/omni.yaml.example secrets/omni.yaml
# sops secrets/omni.yaml
#
# modules/secrets.nix only activates sops when omni.secrets.enable is
# set AND this file exists, so the config evaluates fine without it.
# Keys below are examples the modules consume — adjust to taste.
forgejo-token: REPLACE_ME
lnbits-admin-key: REPLACE_ME
nextcloud-password: REPLACE_ME