diff options
author | Freya Murphy <freya@freyacat.org> | 2025-01-24 13:06:22 -0500 |
---|---|---|
committer | Freya Murphy <freya@freyacat.org> | 2025-01-24 13:06:22 -0500 |
commit | d999d4d0e68b9d7cfa0f477cdbac8fe82850ae78 (patch) | |
tree | af2100aabc890c90c52b26640b07e6d342551794 /hosts | |
parent | refactor home packages, more labels (diff) | |
download | dotfiles-nix-d999d4d0e68b9d7cfa0f477cdbac8fe82850ae78.tar.gz dotfiles-nix-d999d4d0e68b9d7cfa0f477cdbac8fe82850ae78.tar.bz2 dotfiles-nix-d999d4d0e68b9d7cfa0f477cdbac8fe82850ae78.zip |
use sops-nix for secrets
Diffstat (limited to 'hosts')
-rw-r--r-- | hosts/shinji/default.nix (renamed from hosts/shinji.nix) | 7 | ||||
-rw-r--r-- | hosts/shinji/secrets.yaml | 23 |
2 files changed, 25 insertions, 5 deletions
diff --git a/hosts/shinji.nix b/hosts/shinji/default.nix index 756cfe1..d1a02a8 100644 --- a/hosts/shinji.nix +++ b/hosts/shinji/default.nix @@ -12,10 +12,10 @@ inputs.nixpkgs.lib.nixosSystem rec { specialArgs = { inherit inputs; }; modules = [ options - inputs.home-manager.nixosModules.home-manager - ../nix + ../../nix { # options + hostName = "shinji"; monitors = [{ name = "eDP-1"; scale = 1.25; @@ -33,9 +33,6 @@ inputs.nixpkgs.lib.nixosSystem rec { efiSysMountPoint = "/boot/efi"; }; - # hostname - networking.hostName = "shinji"; - # kernel modules boot.initrd.availableKernelModules = [ "nvme" diff --git a/hosts/shinji/secrets.yaml b/hosts/shinji/secrets.yaml new file mode 100644 index 0000000..5bb89cf --- /dev/null +++ b/hosts/shinji/secrets.yaml @@ -0,0 +1,23 @@ +freyanetWg: ENC[AES256_GCM,data:TlaDyx3E6Gez8HHiihFGIGfVedLx9xXSzBNEPmZYC3rqWEHHTfsMh6xL5l8=,iv:qdygQeUQkpVCWOYJ9BLsBtN/F0sYU4fTKz+/Az1QyOg=,tag:88yeDqXtcHshVRiinn2Bsg==,type:str] +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: [] + lastmodified: "2025-01-24T17:54:22Z" + mac: ENC[AES256_GCM,data:IfPObEnZ46RUXjHwK4ibIlfwveqYaOHPtKgIhLjBuuElPHfvhSqgeN4KEwTDPnk38F39qRiyDA3TlEZjIvC856t+a5FG7UkdQRkOkotcqMPwtmEHz5YXw0gqMny7y4+iFMvog0NQL94ptodD0kD/OoJKt/2tGmm9Jv3yBO/qqwo=,iv:BGBONzCHiWLhS0AX9Xa3Rt8dZTzDEGWS0jr72GAx4bc=,tag:SIJyE/xWuxf2U2x2+1cX4w==,type:str] + pgp: + - created_at: "2025-01-24T17:54:22Z" + enc: |- + -----BEGIN PGP MESSAGE----- + + hF4D/YCJcy0T0DkSAQdAxr7yRTBbTqekdXYr4apLlMvUa00t07itX1tUfrQcQjsw + spxEodkxhj5ZiD/ohAQRBzhwMN+xhqo69b+yfRPYke1IXc8CqeQAJHGXZKxhlOPO + 0l4B7AD9YlNgegBsUhFm/7ll5t1oTy3xXzgVKpWhpqAnyMqzyKx7gZcZagjaRaDn + aMITJxTBRU8cmuZazUvu5O2lUKqFCj9Au/wP42eUWQphzsxKkGeYsnqr1z417N83 + =qn+4 + -----END PGP MESSAGE----- + fp: 2A8A27879715447AEEC59D0C18DCCBE353963394 + unencrypted_suffix: _unencrypted + version: 3.9.3 |