From fdaa1338f6d3c95ff0f8684e6406ddebf13b331e Mon Sep 17 00:00:00 2001
From: Koen Wilde <koen@chillheid.nl>
Date: Fri, 19 May 2023 23:06:31 +0200
Subject: [PATCH] Add support for age plugins

---
 modules/age.nix | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/modules/age.nix b/modules/age.nix
index 86c4447..bff23df 100644
--- a/modules/age.nix
+++ b/modules/age.nix
@@ -82,7 +82,7 @@ with lib; let
       umask u=r,g=,o=
       test -f "${secretType.file}" || echo '[agenix] WARNING: encrypted file ${secretType.file} does not exist!'
       test -d "$(dirname "$TMP_FILE")" || echo "[agenix] WARNING: $(dirname "$TMP_FILE") does not exist!"
-      LANG=${config.i18n.defaultLocale or "C"} ${ageBin} --decrypt "''${IDENTITIES[@]}" -o "$TMP_FILE" "${secretType.file}"
+      LANG=${config.i18n.defaultLocale or "C"} PATH=${lib.makeBinPath cfg.pluginPackages} ${ageBin} --decrypt "''${IDENTITIES[@]}" -o "$TMP_FILE" "${secretType.file}"
     )
     chmod ${secretType.mode} "$TMP_FILE"
     mv -f "$TMP_FILE" "$_truePath"
@@ -198,6 +198,13 @@ in {
         The age executable to use.
       '';
     };
+    pluginPackages = mkOption {
+      type = types.listOf types.package;
+      default = [];
+      description = ''
+        List of age plugins that should be available in $PATH during the build.
+      '';
+    };
     secrets = mkOption {
       type = types.attrsOf secretType;
       default = {};