gwg313/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: add sops to candlekeep

Browse source
This commit is contained in:
gwg313 2024-01-05 21:58:31 -05:00
parent 2037200238
commit a07ad591ff
Signed by: gwg313
GPG key ID: 60FF63B4826B7400
3 changed files with 7 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

1
common/nixos/packages.nix
View file

@ -17,6 +17,7 @@
# $ nix search wget # $ nix search wget
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
alejandra alejandra
sops
just just
vim vim
wget wget

1
flake.nix
View file

@ -84,7 +84,6 @@
modules = [ modules = [
# > Our main nixos configuration file < # > Our main nixos configuration file <
./hosts/candlekeep/configuration.nix ./hosts/candlekeep/configuration.nix
inputs.sops-nix.nixosModules.sops
]; ];
}; };
}; };

7
hosts/candlekeep/configuration.nix
View file

@ -35,6 +35,7 @@
# inputs.hardware.nixosModules.common-ssd # inputs.hardware.nixosModules.common-ssd
inputs.nix-index-database.nixosModules.nix-index inputs.nix-index-database.nixosModules.nix-index
inputs.stylix.nixosModules.stylix inputs.stylix.nixosModules.stylix
inputs.sops-nix.nixosModules.sops
# You can also split up your configuration and import pieces of it here: # You can also split up your configuration and import pieces of it here:
# ./users.nix # ./users.nix
@ -50,6 +51,10 @@
sops.defaultSopsFile = ../../secrets/secrets.yaml; sops.defaultSopsFile = ../../secrets/secrets.yaml;
sops.defaultSopsFormat = "yaml"; sops.defaultSopsFormat = "yaml";
sops.age.keyFile = "/home/${user}/.config/sops/age/keys.txt";
sops.secrets.restic_key = {
owner = config.users.users.${user}.name;
};
nixpkgs = { nixpkgs = {
# You can add overlays here # You can add overlays here
@ -99,7 +104,7 @@
initialPassword = "correcthorsebatterystaple"; initialPassword = "correcthorsebatterystaple";
isNormalUser = true; isNormalUser = true;
openssh.authorizedKeys.keys = [ openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJ/cWqqTUuLswymQVh9rKdUWgMNNtZE6PwXMNUgD8/Zx gwg313" "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILq54YrM3BbhBs0oDLOrc1bkg6FCCmkV4E3pWLZp0ejN gwg313@pm.m"
]; ];
extraGroups = ["wheel"]; extraGroups = ["wheel"];
}; };