add agenix support for secrets
This commit is contained in:
parent
99dd7bfc16
commit
4ba7d237b7
4 changed files with 36 additions and 1 deletions
4
secrets/default.nix
Normal file
4
secrets/default.nix
Normal file
|
@ -0,0 +1,4 @@
|
||||||
|
{
|
||||||
|
age.secrets = {
|
||||||
|
};
|
||||||
|
}
|
13
secrets/secrets.nix
Normal file
13
secrets/secrets.nix
Normal file
|
@ -0,0 +1,13 @@
|
||||||
|
let
|
||||||
|
user_eyjhb = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPuma8g+U8Wh+4mLvZoV9V+ngPqxjuIG4zhsbaTeXq65 eyjhb@chronos";
|
||||||
|
user_rendal = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGee4uz+HDOj4Y4ANOhWJhoc4mMLP1gz6rpKoMueQF2J rendal@popper";
|
||||||
|
users = [ user_eyjhb user_rendal ];
|
||||||
|
|
||||||
|
|
||||||
|
system_gerd = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJosDVq8j4V50/z6nj2OMBPhqda95HOS1hKLGvo8viLQ";
|
||||||
|
systems = [ system_gerd ];
|
||||||
|
|
||||||
|
defaultAccess = users ++ systems;
|
||||||
|
in
|
||||||
|
{
|
||||||
|
}
|
|
@ -1,5 +1,11 @@
|
||||||
{
|
let
|
||||||
|
sources = import ./sources/sources.nix;
|
||||||
|
in {
|
||||||
imports = [
|
imports = [
|
||||||
|
# secrets
|
||||||
|
"${sources.agenix}/modules/age.nix"
|
||||||
|
./../secrets
|
||||||
|
|
||||||
./base/common-config.nix
|
./base/common-config.nix
|
||||||
./platforms
|
./platforms
|
||||||
./modules
|
./modules
|
||||||
|
|
|
@ -1,4 +1,16 @@
|
||||||
{
|
{
|
||||||
|
"agenix": {
|
||||||
|
"branch": "main",
|
||||||
|
"description": "age-encrypted secrets for NixOS and Home manager",
|
||||||
|
"homepage": "https://matrix.to/#/#agenix:nixos.org",
|
||||||
|
"owner": "ryantm",
|
||||||
|
"repo": "agenix",
|
||||||
|
"rev": "3f1dae074a12feb7327b4bf43cbac0d124488bb7",
|
||||||
|
"sha256": "09aldzzc50121p0b3apj2c0l71jgmbif46a76shlgps8wbbbkr35",
|
||||||
|
"type": "tarball",
|
||||||
|
"url": "https://github.com/ryantm/agenix/archive/3f1dae074a12feb7327b4bf43cbac0d124488bb7.tar.gz",
|
||||||
|
"url_template": "https://github.com/<owner>/<repo>/archive/<rev>.tar.gz"
|
||||||
|
},
|
||||||
"disko": {
|
"disko": {
|
||||||
"branch": "master",
|
"branch": "master",
|
||||||
"description": "Declarative disk partitioning and formatting using nix [maintainer=@Lassulus]",
|
"description": "Declarative disk partitioning and formatting using nix [maintainer=@Lassulus]",
|
||||||
|
|
Loading…
Reference in a new issue