diff --git a/nixos/machines/lobon/configuration.nix b/nixos/machines/lobon/configuration.nix index 10948c0..8c5252c 100644 --- a/nixos/machines/lobon/configuration.nix +++ b/nixos/machines/lobon/configuration.nix @@ -17,19 +17,4 @@ networking.hostName = "lobon"; system.stateVersion = "23.11"; - - sops.secrets = { - allowlistPass = { - sopsFile = ./allowlistPass.yaml; - owner = "mailman"; - group = "mailman"; - mode = "0400"; - }; - backupKey = { - sopsFile = ./backupKey.yaml; - owner = "root"; - group = "root"; - mode = "0400"; - }; - }; } diff --git a/nixos/modules/mailman.nix b/nixos/modules/mailman.nix index 5edfc87..fbf14be 100644 --- a/nixos/modules/mailman.nix +++ b/nixos/modules/mailman.nix @@ -96,6 +96,12 @@ in { PrivateTmp = true; }; }; + sops.secrets.allowlistPass = { + sopsFile = ../machines/lobon/allowlistPass.yaml; + owner = "mailman"; + group = "mailman"; + mode = "0400"; + }; # Backups services.borgbackup.jobs.mailman = { @@ -113,5 +119,11 @@ in { user = "root"; group = "root"; }; + sops.secrets.backupKey = { + sopsFile = ../machines/lobon/backupKey.yaml; + owner = "root"; + group = "root"; + mode = "0400"; + }; }; }