nixos-config/home/modules/ssh.nix

{
  inputs,
  lib,
  config,
  pkgs,
  ...
}: {
  sops = {
    # defaultSopsFile = ../secrets.yaml;
    # validateSopsFiles = false;
    #
    # age = {
    #   sshKeyPaths = ["/etc/ssh/ssh_host_ed25519_key"];
    #   keyFile = "/var/lib/sops/age/keys.txt";
    #   generateKey = true;
    # };
  secrets = {
    "xqtc_private" = {
      # path = if (pkgs.system == "aarch64-darwin") then "/Users/xqtc/.ssh/id_ed25519" else "/home/xqtc/.ssh/id_ed25519";
      path = config.home.homeDirectory + "/.ssh/id_ed25519";
      # owner = "xqtc";
      mode = "600";
    };
    "xqtc_public" = {
      # path = if (pkgs.system == "aarch64-darwin") then "/Users/xqtc/.ssh/id_ed25519.pub" else "/home/xqtc/.ssh/id_ed25519.pub";
      path = config.home.homeDirectory + "/.ssh/id_ed25519.pub";
      # owner = "xqtc";
      mode = "640";
    };
  };
  };
}