Use ragenix to manage secrets w/tpm bound keys.

Add codestral api key.
This commit is contained in:
Daniel Lundin 2025-06-29 10:42:51 +02:00
commit 5dbdb5d0e2
Signed by: dln
SSH key fingerprint: SHA256:dQy1Xj3UiqJYpKR5ggQ2bxgz4jCH8IF+k3AB8o0kmdI
8 changed files with 276 additions and 31 deletions
home/common/nvim

View file

@ -1,4 +1,5 @@
{
config,
inputs,
lib,
pkgs,
@ -10,6 +11,8 @@ let
text = ''
_sess=$(echo -n "$USER@''${SSH_CONNECTION:-$HOSTNAME}" | tr -c '[:alnum:]@.' '_')
_nvim_sock="''${XDG_RUNTIME_DIR:-/tmp}/nvim.$_sess.sock"
CODESTRAL_API_KEY="$(cat "${config.age.secrets.codestral_api_key.path}")"
export CODESTRAL_API_KEY
exec nvim --listen "$_nvim_sock" --server "$_nvim_sock" "$@"
'';
};
@ -23,9 +26,14 @@ in
programs.man.generateCaches = false;
age.secrets = {
codestral_api_key.file = ../../../secrets/codestral_api_key.age;
};
programs.neovim = {
enable = true;
package = inputs.neovim-nightly-overlay.packages.${pkgs.system}.default;
defaultEditor = true;
viAlias = true;
vimAlias = true;