27 lines
660 B
Nix
27 lines
660 B
Nix
{ config, ... }:
|
|
|
|
{
|
|
sops = {
|
|
age.sshKeyPaths = [ "${config.home.homeDirectory}/.ssh/id_ed25519" ];
|
|
defaultSopsFile = ../secrets/secrets.yaml;
|
|
defaultSopsFormat = "yaml";
|
|
|
|
secrets = {
|
|
ai_gateway_base_url = { };
|
|
ai_gateway_api_key = { };
|
|
};
|
|
};
|
|
|
|
programs.fish.interactiveShellInit = ''
|
|
# sops-nix secrets → env vars
|
|
for pair in \
|
|
AI_GATEWAY_BASE_URL:${config.sops.secrets.ai_gateway_base_url.path} \
|
|
AI_GATEWAY_API_KEY:${config.sops.secrets.ai_gateway_api_key.path}
|
|
set -l parts (string split : $pair)
|
|
if test -r $parts[2]
|
|
set -gx $parts[1] (cat $parts[2])
|
|
end
|
|
end
|
|
'';
|
|
}
|