diff --git a/home/modules/git.nix b/home/modules/git.nix index 721d5ae..517b385 100644 --- a/home/modules/git.nix +++ b/home/modules/git.nix @@ -1,4 +1,8 @@ -{ config, lib, ... }: +{ + config, + lib, + ... +}: { options = { youthlic.programs.git = { @@ -41,6 +45,9 @@ git_protocol = "ssh"; }; }; + sops.secrets."gitea" = { + mode = "0440"; + }; programs.git = lib.mkMerge [ { enable = true; @@ -49,6 +56,11 @@ delta = { enable = true; }; + extraConfig = { + credential = { + helper = "store --file=${config.sops.secrets."gitea".path}"; + }; + }; } (lib.mkIf (cfg.signKey != null) { signing = { diff --git a/secrets/general.yaml b/secrets/general.yaml index 65b8f47..b838876 100644 --- a/secrets/general.yaml +++ b/secrets/general.yaml @@ -1,12 +1,13 @@ ssh-private-key: ENC[AES256_GCM,data:TzcvWxAsQTmoGTR4xMsDIWTKIjr6InWUoqSz3zPnX6cIDyAMHQLN7cNRQcNJ9VAX1IxjlF6+WsTWZahKIZmQ0kfjWr9bsEcx6r4VZp73AGudP7UQ4ntmCYO5cw2iHTiGxbrdIPYYcPf4y7aRjusWxGDeqaPtRB20xGCMigKqazGBN3vsgnQXPj46wcwy7ibsCAtg1DBP1q9c8nspvVOL4bhByxjcLi2p3E54C79fTGOlKRx2HRZh6tFRxH56C6mnuFnDg+TF7I/5t3vw7+EBo7roVJJPypW0tRq+lnbmU4TFFEqf4v+2BaEVKtSBQZd4gb4PRyEgcmmrh2wJjx2JvBi4ansZZWB6d7GRHB1e1Yh16ONJ3Y1XuTjzVNPLbWtPAhPffcg6TDZzWrWxHqES7eI9p+0k8gZZv7vRZM5XpbXlcZpNm1XA2YktJL36asoE1ZjXLzDHNxLAGaq/l1tsxHzx/vZXhIw/dNFEF9xzXH7Jt9oY9I68VbLw/4F4C7epiRJK55Fj/3+ninrsTyMswDlNLfnO6skgpFFcWftTJOAIKhsA2v6a5Wh6jqa9JaxupdYD/ZC+Emp+mivT,iv:3j79GakhiOvvqYUiCc0RaWsD60xl1aRCKnJ0WuEFqt8=,tag:SsUiEzMs/aOwPrv2ZisklQ==,type:str] +gitea: ENC[AES256_GCM,data:Jf09pulzq/db32Ax0kSCU8ew+XpsRmvJy61N070BJUR4KXIMnhd5mW5gMJpDg6mCs4hSbw==,iv:T+dDJar8On04jnCX3geGGAVeKRuLwLzgjKU9I9UzvSA=,tag:t5Ryd18XurrdyZoXUP57ew==,type:str] sops: kms: [] gcp_kms: [] azure_kv: [] hc_vault: [] age: [] - lastmodified: "2025-01-10T12:20:53Z" - mac: ENC[AES256_GCM,data:9BvK132Z+BRb7Anu+jvM6Y6u6D8i05bdNWzQcSj3f6Jk9KkKtT/8HvNJB9RSveeFlamVet1rzXD83CGhGdYEcw74HECrKs9rxmCkZj/hY9jVfFPzuldDVW4UyZOKzArqAzzPH0OHpItDuW+feIqL4Lep6Jr5KuiLo1jypGV/XcI=,iv:not0EwyyMmRzgVYpgQzp0uDznOZASx+7BG+zpuBWQds=,tag:0gqyh3te9L+8QU3B3UZUjg==,type:str] + lastmodified: "2025-01-11T11:26:13Z" + mac: ENC[AES256_GCM,data:ZR7rAMs00ff+Ilp8HBMVq5oP1PX5NK6czNKYd/jIwqk4pr9sS5x8dQELJCLqe1DHC+CC6/qT3O/aCy9TKw2sWwFjYh0F3Ren/tH5UDpn7GVdEkm2lL3pCq6usFh7f7vE4ac5tBEEDvYVIAgFrBvDvwGtnNUoxMF1QqYAZAYMQIM=,iv:8/8r5QO93PuRMnPEweCuiWvJLUSgVzGBva3lJGJdqAc=,tag:9dmrXhwvWzwBbvZpWTz9nQ==,type:str] pgp: - created_at: "2025-01-10T12:20:32Z" enc: |-