Compare commits
2 Commits
4b7c62d00b
...
ec3d9e6049
Author | SHA1 | Date | |
---|---|---|---|
![]() |
ec3d9e6049 | ||
![]() |
fc0476ca5a |
@ -31,8 +31,12 @@ in
|
||||
|
||||
config = mkIf cfg.enable {
|
||||
# Set up SOPS
|
||||
# TODO: Fix the key not being present in .config/sops before sops-nix runs
|
||||
sops.defaultSopsFile = cfg.defaultFile;
|
||||
sops.age.sshKeyPaths = [ "${config.home.homeDirectory}/.config/sops/sops_ed25519_key" ];
|
||||
sops.age.sshKeyPaths = [
|
||||
"${config.home.homeDirectory}/.config/sops/sops_ed25519_key"
|
||||
# "/persist/home/${config.home.username}/.config/sops/sops_ed25519_key"
|
||||
];
|
||||
sops.secrets = cfg.secrets;
|
||||
modules.impermanence.directories = [ ".config/sops" ];
|
||||
};
|
||||
|
@ -23,6 +23,7 @@ in
|
||||
"/var/lib/nixos"
|
||||
];
|
||||
|
||||
# TODO: Remove the secrets module and use sops directly?
|
||||
secrets = {
|
||||
enable = true;
|
||||
secrets = {
|
||||
|
@ -33,6 +33,7 @@ in
|
||||
};
|
||||
|
||||
# Local user
|
||||
sops.secrets."ssh-keys/admin-pub" = { };
|
||||
services.getty.autologinUser = "local";
|
||||
security.sudo.extraRules = [
|
||||
{
|
||||
|
Loading…
x
Reference in New Issue
Block a user