Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Implement module for home-manager #21

Open
Lehmanator opened this issue Jan 6, 2024 · 2 comments
Open

Implement module for home-manager #21

Lehmanator opened this issue Jan 6, 2024 · 2 comments

Comments

@Lehmanator
Copy link

Without a module for home-manager, I am unable to fully replace sops-nix (or agenix) with secrix.

Would be nice if there was a flake output: homeManagerModules.secrix that defined options similar to secrix.system, but for individual users under a name like secrix.users.<name>.

Some implementation ideas beyond just renaming options & adapting their config implementations to home-manager:

  • Option(s) to toggle fallback to using system secrets with the same name if missing for the user. (e.g. I normally use nixos-rebuild
    • Fallback for all secrets: secrix.users.fooAdmin.enableSystemFallback = true
    • Fallback for individual secrets: secrix.users.fooAdmin.secrets.<name>.enableSystemFallback=true (or set value to a (list of) string(s) with secret name(s))
@pinktrink
Copy link
Collaborator

Apologies for the delay!

Allowing this to work with home-manger has certainly been on my slate. I'm hoping to have that done soon. For now, my suggestion would be to add a system secret with proper permissions, then pass it into home manager via osConfig. It's certainly not ideal, but very well may work as a stop gap.

enableSystemFallback is an interesting idea, and likely won't make it to the first iteration, but I like the idea. I'll see what I can do with it.

@gvolpe
Copy link

gvolpe commented Jul 21, 2024

Would love this as well 👍🏽 My use case only involves user secrets, so a HM module would be ideal 🥹

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants