Modularize secrets

example/hosts/secrets/secrets.md

@@ -0,0 +1,3 @@
+# Secrets
+
+This file is for sops-nix and is also where your keys for various secrets will be stored.

modules/programs/sops.nix

@@ -6,6 +6,18 @@
       type = lib.types.bool;
       description = "Enable sops secrets";
     };
+    secrets = lib.mkOption {
+      default = {
+        hub = { };
+        lab = { };
+        ${config.conf.username} = { };
+        nextcloud = { };
+        access = { };
+      };
+      example = { };
+      type = with lib.types; attrsOf anything;
+      description = "secrets for sops";
+    };
   };
   config = lib.mkIf config.mods.sops.enable
     (lib.optionalAttrs (options ? home.packages) {
@@ -16,13 +28,7 @@
           sshKeyPaths = [ ];
         };
         defaultSopsFile = root + /secrets/secrets.yaml;
-        secrets = {
+        secrets = config.mods.sops.secrets;
-          hub = { };
-          lab = { };
-          ${config.conf.username} = { };
-          nextcloud = { };
-          access = { };
-        };
       };
 
       systemd.user.services.mbsync.Unit.After = [ "sops-nix.service" ];