Install sops for encrypting kubernetes secrets.

2025-02-09 11:06:53 -05:00
parent 2d976a1cf3
commit a663a90ada
3 changed files with 31 additions and 0 deletions
--- a/nix/configuration/roles/sops/default.nix
+++ b/nix/configuration/roles/sops/default.nix
@@ -0,0 +1,29 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+
+{
+  imports = [ ];
+
+  options.me = {
+    sops.enable = lib.mkOption {
+      type = lib.types.bool;
+      default = false;
+      example = true;
+      description = "Whether we want to install sops.";
+    };
+  };
+
+  config = lib.mkIf config.me.sops.enable (
+    lib.mkMerge [
+      {
+        environment.systemPackages = with pkgs; [
+          sops # For encrypting kubernetes secrets.
+        ];
+      }
+    ]
+  );
+}