# SPDX-FileCopyrightText: 2023 Luke Granger-Brown <depot@lukegb.com>
#
# SPDX-License-Identifier: Apache-2.0

{ config, lib, ... }:
{
  imports = [ ./vault-agent-secrets.nix ];

  my.vault.secrets.id_ed25519_nixbuild = {
    group = "users";
    template = ''
      {{ with secret "kv/apps/nixbuild" -}}
      {{ .Data.data.id_ed25519_nixbuild }}
      {{- end }}
    '';
  };
  my.vault.secrets."id_ed25519_nixbuild.pub" = {
    group = "users";
    template = ''
      {{ with secret "kv/apps/nixbuild" -}}
      {{ .Data.data.id_ed25519_nixbuild_pub }}
      {{- end }}
    '';
  };
}