From 46d43562ad86ebcb59d38d9d50573ad45b3ba851 Mon Sep 17 00:00:00 2001
From: Grisha Shipunov
Date: Sat, 11 Jan 2025 02:34:54 +0100
Subject: add wg 0xa-mgmt secrets

---
 hosts/cloud/default.nix   |  1 +
 hosts/cloud/secrets.nix   | 11 +++++++++++
 hosts/minime/default.nix  |  1 +
 hosts/minime/secrets.nix  | 11 +++++++++++
 hosts/toaster/secrets.nix |  2 +-
 5 files changed, 25 insertions(+), 1 deletion(-)
 create mode 100644 hosts/cloud/secrets.nix
 create mode 100644 hosts/minime/secrets.nix

(limited to 'hosts')

diff --git a/hosts/cloud/default.nix b/hosts/cloud/default.nix
index adac89e..1cb37c6 100644
--- a/hosts/cloud/default.nix
+++ b/hosts/cloud/default.nix
@@ -3,5 +3,6 @@
     ./configuration.nix
     ./hardware-configuration.nix
     ./networking.nix
+    ./secrets.nix
   ];
 }
diff --git a/hosts/cloud/secrets.nix b/hosts/cloud/secrets.nix
new file mode 100644
index 0000000..d9d5b51
--- /dev/null
+++ b/hosts/cloud/secrets.nix
@@ -0,0 +1,11 @@
+{ config, ... }:
+{
+  sops.defaultSopsFile = ../../secrets/cloud/secrets.yaml;
+  sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
+
+  sops.secrets = {
+    "wg/0xa-mgmt" = {
+      owner = config.users.users.systemd-network.name;
+    };
+  };
+}
diff --git a/hosts/minime/default.nix b/hosts/minime/default.nix
index 8d6fb09..44cca38 100644
--- a/hosts/minime/default.nix
+++ b/hosts/minime/default.nix
@@ -2,6 +2,7 @@
   imports = [
     ./configuration.nix
     ./hardware-configuration.nix
+    ./secrets.nix
     ./zfs.nix
   ];
 }
diff --git a/hosts/minime/secrets.nix b/hosts/minime/secrets.nix
new file mode 100644
index 0000000..3bf2649
--- /dev/null
+++ b/hosts/minime/secrets.nix
@@ -0,0 +1,11 @@
+{ config, ... }:
+{
+  sops.defaultSopsFile = ../../secrets/minime/secrets.yaml;
+  sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
+
+  sops.secrets = {
+    "wg/0xa-mgmt" = {
+      owner = config.users.users.systemd-network.name;
+    };
+  };
+}
diff --git a/hosts/toaster/secrets.nix b/hosts/toaster/secrets.nix
index 4cf23d7..f60c734 100644
--- a/hosts/toaster/secrets.nix
+++ b/hosts/toaster/secrets.nix
@@ -13,7 +13,7 @@
     "wg/mullvad" = {
       owner = config.users.users.systemd-network.name;
     };
-    "wg/oxalab" = {
+    "wg/0xa-mgmt" = {
       owner = config.users.users.systemd-network.name;
     };
   };
-- 
cgit v1.3.1