12 lines
313 B
Nix
12 lines
313 B
Nix
# Secrets decrypted on mibook. sopsFile defaults to secrets/mibook.yaml
|
|
# via machines/core/sops.nix.
|
|
{ ... }:
|
|
{
|
|
sops.secrets.hermes-env = {
|
|
owner = "hermes";
|
|
group = "hermes";
|
|
mode = "0400";
|
|
restartUnits = [ "hermes-agent.service" ]; # confirmed/fixed in Task 4 if the unit name differs
|
|
};
|
|
}
|