Improve secrets management with sops-nix

2025-06-08 14:49:47 -04:00
parent 034b693380
commit 1988d45fbf
5 changed files with 54 additions and 9 deletions
--- a/hosts/anzu/configuration.nix
+++ b/hosts/anzu/configuration.nix
@@ -18,5 +18,17 @@
    ];
  };

+  # Mount SMB share
+  fileSystems."/mnt/share" = {
+    device = "//haruko/share";
+    fsType = "cifs";
+    options = let
+      automount_opts = "x-systemd.automount,noauto,x-systemd.idle-timeout=60,x-systemd.device-timeout=5s,x-systemd.mount-timeout=5s,user,users";
+      username = "chase";
+      password = "$(cat ${config.sops.secrets."smb-password".path})";
+    in ["${automount_opts},username=${username},password=${password},uid=1000,gid=100"];
+  };
+
+
  system.stateVersion = "24.11";
 }