diff --git a/nixos/machines/lobon/configuration.nix b/nixos/machines/lobon/configuration.nix index 8c5252c..10948c0 100644 --- a/nixos/machines/lobon/configuration.nix +++ b/nixos/machines/lobon/configuration.nix @@ -17,4 +17,19 @@ networking.hostName = "lobon"; system.stateVersion = "23.11"; + + sops.secrets = { + allowlistPass = { + sopsFile = ./allowlistPass.yaml; + owner = "mailman"; + group = "mailman"; + mode = "0400"; + }; + backupKey = { + sopsFile = ./backupKey.yaml; + owner = "root"; + group = "root"; + mode = "0400"; + }; + }; } diff --git a/nixos/modules/mailman.nix b/nixos/modules/mailman.nix index fbf14be..5edfc87 100644 --- a/nixos/modules/mailman.nix +++ b/nixos/modules/mailman.nix @@ -96,12 +96,6 @@ in { PrivateTmp = true; }; }; - sops.secrets.allowlistPass = { - sopsFile = ../machines/lobon/allowlistPass.yaml; - owner = "mailman"; - group = "mailman"; - mode = "0400"; - }; # Backups services.borgbackup.jobs.mailman = { @@ -119,11 +113,5 @@ in { user = "root"; group = "root"; }; - sops.secrets.backupKey = { - sopsFile = ../machines/lobon/backupKey.yaml; - owner = "root"; - group = "root"; - mode = "0400"; - }; }; }