nixos-config/hosts/poseidon/secrets.nix

{ config, lib, options, ... }:

{
  config.age = {
    secrets =
      let
        toSecret = name: { ... }@attrs: {
          file = ./../../modules/secrets + "/${name}.age";
        } // attrs;
      in
        lib.mapAttrs toSecret {
          "gandi/api-key" = {};

          "lohr/shared-secret" = {};

          "matrix-synapse/secret-config" = {
            owner = "matrix-synapse";
          };

          "miniflux/admin-credentials" = {};

          "nextcloud/admin-pass" = {
            owner = "nextcloud";
          };

          "paperless/admin-password" = {};
          "paperless/secret-key" = {};

          "restic-backup/poseidon-credentials" = {};
          "restic-backup/poseidon-password" = {};

          "users/alarsyo-hashed-password" = {};
          "users/root-hashed-password" = {};
        };
  };
}