mirror of
https://github.com/ryan4yin/nix-config.git
synced 2026-11-13 12:13:36 +01:00
ryan4yin | 二花
0c8f0fe0c3
* feat(secrets): add work gitconfig secret, symlink it in home-manager * feat(secrets): add a no-sudo replace recipe for new secrets * refactor(secrets): move work gitconfig symlink into the desktop layer
14 lines
579 B
Nix
14 lines
579 B
Nix
{ config, ... }:
|
|
{
|
|
# Work git identity (email/name), decrypted from nix-secrets. ~/work/.gitconfig
|
|
# is what `programs.git.includes` (home/base/core/git.nix) tells git to read
|
|
# for repos under ~/work.
|
|
#
|
|
# This lives in the desktop layer rather than core: base/gui is imported only
|
|
# by hosts that declare the desktop secret (the NixOS desktops via
|
|
# home/linux/gui.nix and macOS via home/darwin), so the consumer and the
|
|
# secret share the same gate.
|
|
home.file."work/.gitconfig".source =
|
|
config.lib.file.mkOutOfStoreSymlink "/etc/agenix/work-gitconfig";
|
|
}
|