nix-infra/hosts/nextcloud/secrets.nix

{ ... }:
{
  deployment.keys = {
    "nextcloud-adminpass.secret" = {
      keyCommand = [ "env" "GNUPGHOME=/home/yuri/.passinfra_gnupg" "PASSWORD_STORE_DIR=/home/yuri/pass/infra" "pass" "nextcloud/adminpass" ];
      destDir = "/secrets";
      user = "nextcloud";
      group = "nextcloud";
      permissions = "0640";
      uploadAt = "pre-activation";
    };
    "nextcloud-secretfile.secret" = {
      keyCommand = [ "env" "GNUPGHOME=/home/yuri/.passinfra_gnupg" "PASSWORD_STORE_DIR=/home/yuri/pass/infra" "pass" "nextcloud/secretfile" ];
      destDir = "/secrets";
      user = "nextcloud";
      group = "nextcloud";
      permissions = "0640";
      uploadAt = "pre-activation";
    };
  };
}