sops

system-config/configuration/sandbox-nathan/default.nix

@@ -94,7 +94,7 @@
         };
     };
 
-    sops = {
+    /*sops = {
         age.keyFile = "/home/nathan/.config/sops/age/keys.txt";
         defaultSopsFile = ./secrets.yaml;
         defaultSopsFormat = "yaml";
@@ -104,7 +104,7 @@
                 neededForUsers = true;
             };
         };
-    };
+    };*/
 
   programs.fuse.userAllowOther = true;
 

system-config/services/containers/keycloak/default.nix

@@ -1,10 +1,14 @@
-{ config, lib, ... }: {
+{ config, lib, inputs, ... }: {
 
     options.sysconfig.opts.virtualization.keycloak.enable = lib.options.mkOption {
         type = lib.types.bool;
         default = false;
     };
 
+    imports = [
+        inputs.sops-nix.nixosModules.sops
+    ];
+
     config = lib.mkIf config.sysconfig.opts.virtualization.keycloak.enable {
 
         sops.secrets."keycloak/dbpass" = {};