Security¶
Source directory: modules/security/
default.nix¶
No option declarations; see source for implementation.
secrets.nix¶
- Enable option: Agenix secrets management
Options: enable, hostKeys, userKeys
Options declaration (Nix)
options.modules.security.secrets = {
enable = mkEnableOption "Agenix secrets management";
hostKeys = mkOption {
type = types.listOf types.str;
default = [ ];
description = "List of SSH host key paths for decryption";
example = [ "/etc/ssh/ssh_host_ed25519_key" ];
};
userKeys = mkOption {
type = types.listOf types.str;
default = [ ];
description = "List of user SSH key paths for secrets management";
example = [ "/home/olafkfreund/.ssh/id_ed25519" ];
};
}