agenix module

hosts/tartarus/configuration.nix

@@ -44,7 +44,6 @@
   hardware.bluetooth.powerOnBoot = true; # powers up the default Bluetooth controller on boot
 
   environment.systemPackages = with pkgs; [
-    inputs.agenix.packages.x86_64-linux.default
     inputs.osbm-nvim.packages.x86_64-linux.default
     nixd
   ];

hosts/ymir/configuration.nix

@@ -90,7 +90,6 @@
 
   environment.systemPackages = with pkgs; [
     nvidia-container-toolkit
-    inputs.agenix.packages.x86_64-linux.default
     inputs.osbm-nvim.packages.x86_64-linux.default
     nixd
   ];

modules/common-packages.nix

@@ -30,7 +30,6 @@
     lolcat
     cmatrix
     inxi
-    age
     jq
     onefetch
     just

modules/secrets.nix

@@ -1,4 +1,25 @@
 {
+  config,
+  pkgs,
+  inputs,
+  lib,
+  ...
+}: {
+  options = {
+    myModules.enableSecrets = lib.mkOption {
+      type = lib.types.bool;
+      default = true;
+      description = "Enable agenix secrets management";
+    };
+  };
+
+  config = lib.mkMerge [
+    (lib.mkIf config.myModules.enableSecrets {
+      environment.systemPackages = with pkgs; [
+        inputs.agenix.packages.x86_64-linux.default
+        age
+      ];
+
       age.secrets = {
         network-manager.file = ../secrets/network-manager.age;
         ssh-key-private = {
@@ -14,4 +35,6 @@
           mode = "0644";
         };
       };
+    })
+  ];
 }