proper repo
This commit is contained in:
parent
33d01daa3d
commit
8a35a32445
17 changed files with 338 additions and 109 deletions
|
|
@ -1,27 +1,26 @@
|
|||
{ inputs, den, ... }: {
|
||||
{ inputs, den, config, ... }:
|
||||
let
|
||||
username = config.local.identity.username;
|
||||
in {
|
||||
den.aspects.secrets.nixos = { ... }: {
|
||||
imports = [ inputs.sops-nix.nixosModules.sops ];
|
||||
|
||||
sops = {
|
||||
defaultSopsFile = ../secrets/secrets.yaml;
|
||||
|
||||
# NOTE: This thing gave me a huge headache to setup.
|
||||
# If you are ME from future, don't forget to place
|
||||
# your age keys here!
|
||||
# Place your age keys at /etc/sops/age/keys.txt before deploying.
|
||||
# See README.md for setup instructions.
|
||||
age.keyFile = "/etc/sops/age/keys.txt";
|
||||
|
||||
# Define secrets to be used.
|
||||
secrets = {
|
||||
# Literally the user password.
|
||||
"user-password" = {
|
||||
neededForUsers = true;
|
||||
};
|
||||
|
||||
# SSH private key.
|
||||
"ssh-private-key" = {
|
||||
path = "/home/zoty/.ssh/id_ed25519";
|
||||
owner = "zoty";
|
||||
mode = "0400";
|
||||
path = "/home/${username}/.ssh/id_ed25519";
|
||||
owner = username;
|
||||
mode = "0400";
|
||||
};
|
||||
};
|
||||
};
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue