mirror of
https://github.com/Mic92/sops-nix.git
synced 2024-12-14 11:57:52 +00:00
57 lines
2 KiB
Nix
57 lines
2 KiB
Nix
{
|
|
description = "Integrates sops into nixos";
|
|
inputs.nixpkgs.url = "github:NixOS/nixpkgs/nixpkgs-unstable";
|
|
inputs.nixpkgs-stable.url = "github:NixOS/nixpkgs/release-22.11";
|
|
nixConfig.extra-substituters = ["https://cache.garnix.io"];
|
|
nixConfig.extra-trusted-public-keys = ["cache.garnix.io:CTFPyKSLcx5RMJKfLo5EEPUObbA78b0YQ2DTCJXqr9g="];
|
|
outputs = {
|
|
self,
|
|
nixpkgs,
|
|
nixpkgs-stable
|
|
}: let
|
|
systems = [
|
|
"x86_64-linux"
|
|
"x86_64-darwin"
|
|
"aarch64-darwin"
|
|
"aarch64-linux"
|
|
];
|
|
forAllSystems = f: nixpkgs.lib.genAttrs systems (system: f system);
|
|
suffix-version = version: attrs: nixpkgs.lib.mapAttrs' (name: value: nixpkgs.lib.nameValuePair (name + version) value) attrs;
|
|
suffix-stable = suffix-version "-22_11";
|
|
in {
|
|
overlays.default = final: prev: let
|
|
localPkgs = import ./default.nix {pkgs = final;};
|
|
in {
|
|
inherit (localPkgs) sops-install-secrets sops-init-gpg-key sops-pgp-hook sops-import-keys-hook sops-ssh-to-age;
|
|
# backward compatibility
|
|
inherit (prev) ssh-to-pgp;
|
|
};
|
|
nixosModules = {
|
|
sops = import ./modules/sops;
|
|
default = self.nixosModules.sops;
|
|
};
|
|
homeManagerModules.sops = import ./modules/home-manager/sops.nix;
|
|
homeManagerModule = self.homeManagerModules.sops;
|
|
packages = forAllSystems (system:
|
|
import ./default.nix {
|
|
pkgs = import nixpkgs {inherit system;};
|
|
});
|
|
checks = nixpkgs.lib.genAttrs ["x86_64-linux" "aarch64-linux"]
|
|
(system: let
|
|
tests = self.packages.${system}.sops-install-secrets.tests;
|
|
packages-stable = import ./default.nix {
|
|
pkgs = import nixpkgs-stable {inherit system;};
|
|
};
|
|
tests-stable = packages-stable.sops-install-secrets.tests;
|
|
in tests //
|
|
(suffix-stable tests-stable) //
|
|
(suffix-stable packages-stable));
|
|
|
|
devShells = forAllSystems (system: let
|
|
pkgs = nixpkgs.legacyPackages.${system};
|
|
in {
|
|
unit-tests = pkgs.callPackage ./pkgs/unit-tests.nix {};
|
|
default = pkgs.callPackage ./shell.nix {};
|
|
});
|
|
};
|
|
}
|