init

modules/laptop/default.nix

@@ -0,0 +1,36 @@
+# Module: Laptop Secrets & Base Configuration
+# Description: Secrets management (sops-nix) and keyboard layout
+# Services: sops-nix
+# Dependencies: sops-nix for secrets management
+# Note: Other laptop features (gaming, virtualization, etc.) are in separate modules
+
+{ customConfig, ... }:
+
+let
+  userHome = "/home/${customConfig.username}";
+in
+{
+  sops.validateSopsFiles = false;
+  sops.age.keyFile = "${userHome}/.config/sops/age/keys.txt";
+  
+  # WiFi networks configuration - entire network list encrypted
+  sops.secrets.wifi-networks = {
+    path = "/run/secrets/wifi-networks.conf";
+    sopsFile = ../../secrets/wifi-networks.yaml;
+    format = "yaml";
+    key = "wifi-networks";
+    owner = "wpa_supplicant";
+    group = "wpa_supplicant";
+    mode = "0400";
+  };
+
+  sops.secrets.zwift = {
+    path = "${userHome}/.config/zwift/config";
+    sopsFile = ../../secrets/zwift.yaml;
+    owner = customConfig.username;
+    group = "users";
+    mode = "0400";
+  };
+
+  services.xserver.xkb.layout = "fr";
+}