nixos-config/machines/sops.nix

{ inputs, ... }:
{
  imports = [ inputs.sops-nix.nixosModules.sops ];
  sops = {
    defaultSopsFile = ./secrets.yaml;
    # TODO: How to generate this key when bootstrap?
    age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
    secrets = {
      github_public_token = {
        owner = "root";
      };
      clash_subscription_link = { 
        owner = "root";
      };
      singbox_sg_server = {
         owner = "root";
      };
      singbox_jp_server = {
         owner = "root";
      };
      singbox_password = {
         owner = "root";
      };
      singbox_uuid = {
         owner = "root";
      };
      grafana_cloud_api = {
         owner = "prometheus";
      };
    };
  };
}