Compare commits
2 Commits
4b7c62d00b
...
ec3d9e6049
Author | SHA1 | Date | |
---|---|---|---|
![]() |
ec3d9e6049 | ||
![]() |
fc0476ca5a |
@ -31,8 +31,12 @@ in
|
|||||||
|
|
||||||
config = mkIf cfg.enable {
|
config = mkIf cfg.enable {
|
||||||
# Set up SOPS
|
# Set up SOPS
|
||||||
|
# TODO: Fix the key not being present in .config/sops before sops-nix runs
|
||||||
sops.defaultSopsFile = cfg.defaultFile;
|
sops.defaultSopsFile = cfg.defaultFile;
|
||||||
sops.age.sshKeyPaths = [ "${config.home.homeDirectory}/.config/sops/sops_ed25519_key" ];
|
sops.age.sshKeyPaths = [
|
||||||
|
"${config.home.homeDirectory}/.config/sops/sops_ed25519_key"
|
||||||
|
# "/persist/home/${config.home.username}/.config/sops/sops_ed25519_key"
|
||||||
|
];
|
||||||
sops.secrets = cfg.secrets;
|
sops.secrets = cfg.secrets;
|
||||||
modules.impermanence.directories = [ ".config/sops" ];
|
modules.impermanence.directories = [ ".config/sops" ];
|
||||||
};
|
};
|
||||||
|
@ -23,6 +23,7 @@ in
|
|||||||
"/var/lib/nixos"
|
"/var/lib/nixos"
|
||||||
];
|
];
|
||||||
|
|
||||||
|
# TODO: Remove the secrets module and use sops directly?
|
||||||
secrets = {
|
secrets = {
|
||||||
enable = true;
|
enable = true;
|
||||||
secrets = {
|
secrets = {
|
||||||
|
@ -33,6 +33,7 @@ in
|
|||||||
};
|
};
|
||||||
|
|
||||||
# Local user
|
# Local user
|
||||||
|
sops.secrets."ssh-keys/admin-pub" = { };
|
||||||
services.getty.autologinUser = "local";
|
services.getty.autologinUser = "local";
|
||||||
security.sudo.extraRules = [
|
security.sudo.extraRules = [
|
||||||
{
|
{
|
||||||
|
Loading…
x
Reference in New Issue
Block a user