nixos-config/configurations/host/waffentrager/secrets/default.nix

{ materusCfg, ... }:
{
  imports =
    [

    ] ++ (if (materusCfg.materusFlake.decrypted) then [ ./private ] else [ ]);

  sops.age.generateKey = false;
  sops.gnupg.home = null;
  sops.gnupg.sshKeyPaths = [ ];
  sops.defaultSopsFile = materusCfg.hostPath + "/secrets/secrets.yaml";

  services.openssh.hostKeys = [
    {
      bits = 4096;
      path = "/materus/root/ssh_host_rsa_key";
      type = "rsa";
    }
    {
      path = "/materus/root/ssh_host_ed25519_key";
      type = "ed25519";
    }
  ];
  sops.secrets.wireguard = { };
  sops.secrets."users/materus" = { neededForUsers = true; };
  sops.secrets.elements = { };
  sops.secrets.nextcloud-adminpass = { };
  sops.secrets.maloja = { };
  sops.secrets.maloja-api = { };
  sops.secrets.spotify-client-id = {};
  sops.secrets.spotify-client-secret = {};
  sops.secrets.lastfm-user= {};
  sops.secrets.lastfm-pass = {};
  sops.secrets.lastfm-api = {};
  sops.secrets.lastfm-secret = {};
  sops.secrets.lastfm-token = {};
  sops.secrets.listenbrainz-api = {};
}