In reply to @saik3617:matrix.org

Hello, heres a simple question that I've had a hard time finding an answer to:

is there a way to have a subfolder within secrets/?

I prefer subfoldering--category/secret_name.age--over appending--category.secret_name.age

Additionally, is there a way to modularize an environment file?

Something like

virtualisation.oci-containers.containers.postgres = {
  environmentFiles = [
    # Dynamically building an env file, which contains POSTGRES_PASSWORD=<contents of postgres-password.age>
    config.age.buildEnvFile "POSTGRES_PASSWORD" config.age.secrets.postgres-password.path
  ];
};
# then, i can construct a different envFile:
virtualisation.oci-containers.containers.grafana = {
  environmentFile = [
    # Note that the same value is being used, but is named something else, DATABASE_PASS
    # This prevents me needing two `.age` files for the same value.
    config.age.buildEnvFile "DATABASE_PASS" config.age.secrets.postgres-password.path
  ];
};

In reply to @mynacol:mynacol.xyz
Hello everyone, I just tried to create a secret where the filename starts with a dash (-) for reasons, but that unfortunately doesn't work. The relevant error message is basename: invalid option -- 'd'. Is there a known workaround?

would anyone know how to access an agenix decrypted file in home manager, for things in my configuration.nix file I use config.age.secrets.whatever but I've been told I shouldn't pass config into my home.nix file