hosts/cloud/default.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21

{ config, ... }:
{
  imports = [
    ./configuration.nix
    ./hardware-configuration.nix
    ./networking.nix
    ./proxy
  ];

  sops.defaultSopsFile = ./secrets.yaml;
  sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];

  sops.secrets = {
    "wg/0xa-mgmt" = {
      owner = config.users.users.systemd-network.name;
    };
    "wg/0xa-proxy" = {
      owner = config.users.users.systemd-network.name;
    };
  };
}