nixos-config/docs/content/en-US/03-project-specific-setup/03-secrets-management/assets/attach-sops-prefix.nix

{ config, lib, pkgs, ... }:

{
  sops.secrets =
    lib.getSecrets ./sops.yaml
      {
        ssh-key = { };
        "borg/ssh-key" = { };
      } //
    (lib.getSecrets ./wireguard.yaml
      (lib.attachSopsPathPrefix "wireguard" {
        "private-key" = {
          group = config.users.users.systemd-network.group;
          reloadUnits = [ "systemd-networkd.service" ];
          mode = "0640";
        };
      }));
}