nixos-config/docs/website/content/en/03-project-specific-setup/03-secrets-management/assets/attach-sops-prefix.nix

{ config, lib, pkgs, ... }:

{
  sops.secrets = lib.getSecrets ./sops.yaml {
    ssh-key = { };
    "borg/ssh-key" = { };
  } // (lib.getSecrets ./wireguard.yaml (lib.attachSopsPathPrefix "wireguard" {
    "private-key" = {
      group = config.users.users.systemd-network.group;
      reloadUnits = [ "systemd-networkd.service" ];
      mode = "0640";
    };
  }));
}