feat: 集成 sops-nix 机密管理，声明式注入 Fish 环境变量

2026-04-11 01:48:09 +08:00
parent cdc2bd0646
commit b28b172a01
8 changed files with 115 additions and 26 deletions
@@ -19,6 +19,11 @@
      inputs.nixpkgs.follows = "nixpkgs";
    };

+    sops-nix = {
+      url = "github:Mic92/sops-nix";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+
    catppuccin = {
      url = "github:catppuccin/nix";
      inputs.nixpkgs.follows = "nixpkgs";
@@ -67,10 +72,11 @@

      # ── Packages ────────────────────────────────────────
      packages = nixpkgs.lib.genAttrs [ "aarch64-darwin" "x86_64-linux" ] (system: {
-        comment-checker = (import nixpkgs {
-          inherit system;
-          overlays = [ self.overlays.default ];
-        }).comment-checker;
+        comment-checker =
+          (import nixpkgs {
+            inherit system;
+            overlays = [ self.overlays.default ];
+          }).comment-checker;
      });

      # ── Overlays ───────────────────────────────────────