Files
home-manager/modules/programs/aiac.nix
Austin Horstman 289607b8d8 aiac: warn that settings are world-readable
The settings example showed a literal api_key, which ends up in
aiac.toml in the world-readable Nix store. aiac expands environment
variables in api_key, so show an environment variable reference
instead.
2026-09-25 13:01:17 -05:00

58 lines
1.4 KiB
Nix

{
lib,
pkgs,
config,
...
}:
let
inherit (lib)
mkIf
mkEnableOption
mkPackageOption
mkOption
;
cfg = config.programs.aiac;
tomlFormat = pkgs.formats.toml { };
in
{
options.programs.aiac = {
enable = mkEnableOption "aiac";
package = mkPackageOption pkgs "aiac" { nullable = true; };
settings = mkOption {
inherit (tomlFormat) type;
default = { };
example = {
default_backend = "official_openai";
backends = {
official_openai = {
type = "openai";
api_key = "$OPENAI_API_KEY";
default_model = "gpt-4o";
};
localhost = {
type = "ollama";
url = "http://localhost:11434/api";
};
};
};
description = ''
Configuration settings for aiac. All the available options can be found here:
<https://github.com/gofireflyio/aiac/?tab=readme-ov-file#configuration>.
These settings are written to the world-readable Nix store, so avoid
putting a literal API key here. aiac expands environment variables
in `api_key`, so you can reference one instead, as in the example.
'';
};
};
config = mkIf cfg.enable {
home.packages = mkIf (cfg.package != null) [ cfg.package ];
xdg.configFile."aiac/aiac.toml" = mkIf (cfg.settings != { }) {
source = tomlFormat.generate "aiac.toml" cfg.settings;
};
};
}