diff --git a/flake-profiles/system-hydrogen-sulfide/flake.lock b/flake-profiles/system-hydrogen-sulfide/flake.lock index 5cd5632..5f6d6e7 100644 --- a/flake-profiles/system-hydrogen-sulfide/flake.lock +++ b/flake-profiles/system-hydrogen-sulfide/flake.lock @@ -131,7 +131,28 @@ "deploy-rs": "deploy-rs", "home-manager": "home-manager", "nixos-wsl": "nixos-wsl", - "nixpkgs": "nixpkgs_2" + "nixpkgs": "nixpkgs_2", + "sops-nix": "sops-nix" + } + }, + "sops-nix": { + "inputs": { + "nixpkgs": [ + "nixpkgs" + ] + }, + "locked": { + "lastModified": 1754988908, + "narHash": "sha256-t+voe2961vCgrzPFtZxha0/kmFSHFobzF00sT8p9h0U=", + "owner": "Mic92", + "repo": "sops-nix", + "rev": "3223c7a92724b5d804e9988c6b447a0d09017d48", + "type": "github" + }, + "original": { + "owner": "Mic92", + "repo": "sops-nix", + "type": "github" } }, "systems": { diff --git a/venus/modules/nixos-darwin/hydrogen-sulfide.nix b/venus/modules/nixos-darwin/hydrogen-sulfide.nix index 91fa2fa..5923f92 100644 --- a/venus/modules/nixos-darwin/hydrogen-sulfide.nix +++ b/venus/modules/nixos-darwin/hydrogen-sulfide.nix @@ -150,6 +150,7 @@ in sops = { secrets."milky-way-token.txt" = { + format = "binary"; mode = "0400"; sopsFile = ./../../../secrets/milky-way-token.txt; };