home/hosts/odin/system/age.nix

{ config, inputs, ... }:

let
  secrets = inputs.secrets.secrets;
in

{
  imports = [ inputs.agenix.nixosModules.default ];

  age.identityPaths = [ "/persist/etc/ssh/ssh_host_ed25519_key" ];
  age.secrets = {
    "odin/services/caddy" = {
      file = secrets."odin/services/caddy.age";
      owner = config.services.caddy.user;
      group = config.services.caddy.group;
    };
    "odin/services/cloudflared".file = secrets."odin/services/cloudflared.age";
    "odin/services/cloudflared-tunnel".file = secrets."odin/services/cloudflared-tunnel.age";
    "odin/services/grasp-owner" = {
      file = secrets."odin/services/grasp-owner.age";
      mode = "0444";
    };
    "odin/services/gogs-admin" = {
      file = secrets."odin/services/gogs-admin.age";
      mode = "0444";
    };
    "odin/services/mollysocket".file = secrets."odin/services/mollysocket.age";
    "odin/services/nullmailer" = {
      file = secrets."odin/services/nullmailer.age";
      owner = config.services.nullmailer.user;
    };
    "odin/services/samba".file = secrets."odin/services/samba.age";
    "odin/services/tailscale".file = secrets."odin/services/tailscale.age";
    "odin/services/vaultwarden".file = secrets."odin/services/vaultwarden.age";
    "odin/users/thomas".file = secrets."odin/users/thomas.age";
  };
}