0xa/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

reorganize secrets

Browse source
This commit is contained in:
Grisha Shipunov 2025-01-19 20:46:38 +01:00
parent 42128ebbe1
commit 76e043171c
14 changed files with 49 additions and 58 deletions
Download patch file Download diff file Expand all files Collapse all files

21
hosts/toaster/default.nix
View file

@ -1,15 +1,32 @@
{ pkgs, ... }:
{ pkgs, config, ... }:
{
imports = [
./amd.nix
./hardware-configuration.nix
# ./irc.nix
./network
./secrets.nix
./secure-boot.nix
./zfs.nix
];
sops.defaultSopsFile = ./secrets.yaml;
sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
sops.secrets = {
"wg/zw" = {
owner = config.users.users.systemd-network.name;
};
"wg/dvb" = {
owner = config.users.users.systemd-network.name;
};
"wg/mullvad" = {
owner = config.users.users.systemd-network.name;
};
"wg/0xa-mgmt" = {
owner = config.users.users.systemd-network.name;
};
};
nixpkgs.config.allowUnfree = true;
# Use the systemd-boot EFI boot loader.