nixos/modules/core/sops.nix

{ lib, ... }:
let
  secretFile = ../../secrets/users/luochen570.enc.yaml;
in
{
  sops = {
    age = {
      keyFile = "/var/lib/sops-nix/key.txt";
      generateKey = true;
    };
    defaultSopsFile = secretFile;
    secrets = lib.mkIf (builtins.pathExists secretFile) {
      "users/luochen570/authorized_key" = {};
      "users/luochen570/ssh_private_key" = {
        owner = "luochen570";
        group = "users";
        mode = "0400";
      };
      "users/luochen570/ssh_config" = {
        owner = "luochen570";
        group = "users";
        mode = "0600";
      };
      "users/luochen570/passwordHash" = {
        neededForUsers = true;
      };
    };
  };
}