[modules] nix-config.nix

home/hosts/eris.nix

@@ -12,6 +12,7 @@
     ../modules/vscode.nix
     ../modules/gnome-dconf.nix
     ../modules/ssh.nix
+    ../modules/nix-config.nix
   ];
 
   home.packages = with pkgs;[

home/hosts/hypnos.nix

@@ -15,6 +15,7 @@
     ../modules/zsh.nix
     ../modules/llm.nix
     ../modules/ssh.nix
+    ../modules/nix-config.nix
     ../modules/atuin.nix
     ../modules/git.nix
   ];

home/modules/nix-config.nix

@@ -0,0 +1,21 @@
+{ config, lib, ... }:
+let
+  nixConfDir = "${config.home.homeDirectory}/.config/nix";
+in
+{
+  home.activation.nixConfDir = lib.hm.dag.entryAfter [ "writeBoundary" ] ''
+    mkdir -p "${nixConfDir}"
+  '';
+
+  sops.secrets."github-pat" = {
+    sopsFile = ../../secrets/github.yaml;
+  };
+
+  sops.templates."nix.conf" = {
+    path = "${nixConfDir}/nix.conf";
+    mode = "600";
+    content = ''
+      access-tokens = github.com=${config.sops.placeholder."github-pat"}
+    '';
+  };
+}