From 2c121c5411a78a5e8fc98b145c9667c8528e238c Mon Sep 17 00:00:00 2001
From: Collin Williams <96917990+bluedragon1221@users.noreply.github.com>
Date: Tue, 30 Dec 2025 10:23:03 -0600
Subject: new secrets-management system

---
 modules/secrets/options.nix | 32 ++++++++++++++++++++++++++++++++
 1 file changed, 32 insertions(+)
 create mode 100644 modules/secrets/options.nix

(limited to 'modules/secrets/options.nix')

diff --git a/modules/secrets/options.nix b/modules/secrets/options.nix
new file mode 100644
index 0000000..de15f50
--- /dev/null
+++ b/modules/secrets/options.nix
@@ -0,0 +1,32 @@
+{lib, ...}: let
+  inherit (lib) mkOption;
+in {
+  options = {
+    collinux.secrets = lib.mkOption {
+      type = lib.types.attrsOf (
+        lib.types.submodule ({config, ...}: {
+          options = {
+            name = mkOption {
+              type = lib.types.str;
+              default = config._module.args.name;
+            };
+            file = mkOption {type = lib.types.path;};
+            mode = mkOption {
+              type = lib.types.str;
+              default = "0400";
+            };
+            owner = mkOption {
+              type = lib.types.str;
+              default = "0";
+            };
+            path = mkOption {
+              type = lib.types.str;
+              default = "/run/secrets.d/${config.name}";
+            };
+          };
+        })
+      );
+      default = {};
+    };
+  };
+}
-- 
cgit v1.3.1