Import lib in secrets.nix

[RatCornu]

Hello! I would like to import lib variable in the secrets.nix file to be able to declare more generic rules in secret configuration. However I could not find a workaround to do it: would it be possible to add the possibility to import lib or pkgs in the configuration file?

Thanks for your work!

[wyyllou]

You can do it like this, its not the most pure thing but it works. Theres probably a more complicated way with builtins.getFlake if you want to use the exact nixpkgs commit of your flake in the secrets.nix, instead of the one in your nix search path, but this should be fine.

# secrets.nix
let
  inherit (import <nixpkgs> { }) lib;
  system = "ssh key...";
in
{
   "example.age".publicKeys = lib.singleton system; # example
}