refactor(sops): Move secret definitions to specific modules

This commit is contained in:
Tristan Daniël Maat 2025-11-14 10:54:51 +08:00
parent 767a14ab6e
commit ee388398e5
Signed by: tlater
GPG key ID: 02E935006CF2E8E7
14 changed files with 78 additions and 98 deletions

View file

@ -75,4 +75,10 @@ in
# AmbientCapabilities = [ "CAP_NET_BIND_SERVICE" ];
};
};
sops.secrets = {
# Accessed via systemd cred through /run/secrets/heisebridge
"heisenbridge/as-token" = { };
"heisenbridge/hs-token" = { };
};
}