Compare commits

...

2 Commits

Author SHA1 Message Date
Jan-Bulthuis
ec3d9e6049 Updated modules 2025-05-30 16:08:51 +02:00
Jan-Bulthuis
fc0476ca5a Added admin-pub secret 2025-05-30 16:08:39 +02:00
3 changed files with 7 additions and 1 deletions

View File

@ -31,8 +31,12 @@ in
config = mkIf cfg.enable {
# Set up SOPS
# TODO: Fix the key not being present in .config/sops before sops-nix runs
sops.defaultSopsFile = cfg.defaultFile;
sops.age.sshKeyPaths = [ "${config.home.homeDirectory}/.config/sops/sops_ed25519_key" ];
sops.age.sshKeyPaths = [
"${config.home.homeDirectory}/.config/sops/sops_ed25519_key"
# "/persist/home/${config.home.username}/.config/sops/sops_ed25519_key"
];
sops.secrets = cfg.secrets;
modules.impermanence.directories = [ ".config/sops" ];
};

View File

@ -23,6 +23,7 @@ in
"/var/lib/nixos"
];
# TODO: Remove the secrets module and use sops directly?
secrets = {
enable = true;
secrets = {

View File

@ -33,6 +33,7 @@ in
};
# Local user
sops.secrets."ssh-keys/admin-pub" = { };
services.getty.autologinUser = "local";
security.sudo.extraRules = [
{