lto server
This commit is contained in:
@@ -1,29 +1,34 @@
|
|||||||
{
|
{
|
||||||
config,
|
config,
|
||||||
lib,
|
lib,
|
||||||
|
namespace,
|
||||||
...
|
...
|
||||||
}:
|
}:
|
||||||
let
|
let
|
||||||
cfg = config.mjallen.sops;
|
cfg = config.${namespace}.sops;
|
||||||
in
|
in
|
||||||
{
|
{
|
||||||
imports = [ ./options.nix ];
|
imports = [ ./options.nix ];
|
||||||
|
|
||||||
config = lib.mkIf cfg.enable {
|
config = lib.mkIf cfg.enable {
|
||||||
# sops = {
|
sops = {
|
||||||
# age.keyFile = "/home/${user}/.config/sops/age/keys.txt";
|
age.keyFile = "/home/${config.${namespace}.user.name}/.config/sops/age/keys.txt";
|
||||||
# defaultSopsFile = "/etc/nixos/secrets/secrets.yaml";
|
defaultSopsFile = "/etc/nixos/secrets/secrets.yaml";
|
||||||
# validateSopsFiles = false;
|
validateSopsFiles = false;
|
||||||
# secrets = {
|
secrets = {
|
||||||
# "ssh-keys-public/desktop-nixos" = {
|
"github-token" = { };
|
||||||
# path = "/home/${user}/.ssh/id_ed25519.pub";
|
};
|
||||||
# mode = "0644";
|
templates = {
|
||||||
# };
|
".env".content = ''
|
||||||
# "ssh-keys-private/desktop-nixos" = {
|
GITHUB_TOKEN = "${config.sops.placeholder.github-token}"
|
||||||
# path = "/home/${user}/.ssh/id_ed25519";
|
'';
|
||||||
# mode = "0600";
|
};
|
||||||
# };
|
};
|
||||||
# };
|
|
||||||
# };
|
programs.zsh.initExtra = ''
|
||||||
|
if [ -f ${config.sops.templates.".env".path} ]; then
|
||||||
|
export $(grep -v '^#' ${config.sops.templates.".env".path} | xargs)
|
||||||
|
fi
|
||||||
|
'';
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -1,7 +1,7 @@
|
|||||||
{ lib, ... }:
|
{ lib, namespace, ... }:
|
||||||
with lib;
|
with lib;
|
||||||
{
|
{
|
||||||
options.mjallen.sops = {
|
options.${namespace}.sops = {
|
||||||
enable = mkEnableOption "enable sops";
|
enable = mkEnableOption "enable sops";
|
||||||
|
|
||||||
defaultSopsFile = mkOption {
|
defaultSopsFile = mkOption {
|
||||||
|
|||||||
@@ -63,7 +63,7 @@ let
|
|||||||
|
|
||||||
serverLtoKernelAttrs = {
|
serverLtoKernelAttrs = {
|
||||||
taste = "linux-cachyos-server";
|
taste = "linux-cachyos-server";
|
||||||
configPath = ./config-nix/cachyos-lto.x86_64-linux.nix;
|
configPath = ./config-nix/cachyos-server-lto.x86_64-linux.nix;
|
||||||
|
|
||||||
# Pass the unified arguments (including the resolved 'self') to llvm-pkgs
|
# Pass the unified arguments (including the resolved 'self') to llvm-pkgs
|
||||||
inherit (import ./lib/llvm-pkgs.nix (args // { inherit self; })) callPackage;
|
inherit (import ./lib/llvm-pkgs.nix (args // { inherit self; })) callPackage;
|
||||||
|
|||||||
@@ -1,6 +1,7 @@
|
|||||||
#ENC[AES256_GCM,data:HkOno2ohMSLs46g=,iv:7KHzoElBP/GMIVubcIBya42SoFKVyt/+YRIxkgRE3Cw=,tag:U87dYHrKu/qqbLf5r7XEiA==,type:comment]
|
#ENC[AES256_GCM,data:HkOno2ohMSLs46g=,iv:7KHzoElBP/GMIVubcIBya42SoFKVyt/+YRIxkgRE3Cw=,tag:U87dYHrKu/qqbLf5r7XEiA==,type:comment]
|
||||||
wifi: ENC[AES256_GCM,data:Rs+4Km4DogO7XatA,iv:JUv9HkNWsv/l4Fli5sFeUeYuWG1Yju95G59FJ/Q5W50=,tag:gRFCG4d5OBMRx1QayRV8Zg==,type:str]
|
wifi: ENC[AES256_GCM,data:Rs+4Km4DogO7XatA,iv:JUv9HkNWsv/l4Fli5sFeUeYuWG1Yju95G59FJ/Q5W50=,tag:gRFCG4d5OBMRx1QayRV8Zg==,type:str]
|
||||||
matt_password: ENC[AES256_GCM,data:/8utn5xMoWIxXitfg2kFZCQwbqqn6rH7Pt5KYeTyGintjg5jF8T9eqdqrBGlqMdKh/YjUTwZZg4/PkNG9/gqk86pjaUtg+8C6w==,iv:BDbThvyXmzB9eKfuK0V2eR8p20g7rOOTOA3AYNCM6TI=,tag:KvIKOLFW9NMmQy97QWRfQA==,type:str]
|
matt_password: ENC[AES256_GCM,data:/8utn5xMoWIxXitfg2kFZCQwbqqn6rH7Pt5KYeTyGintjg5jF8T9eqdqrBGlqMdKh/YjUTwZZg4/PkNG9/gqk86pjaUtg+8C6w==,iv:BDbThvyXmzB9eKfuK0V2eR8p20g7rOOTOA3AYNCM6TI=,tag:KvIKOLFW9NMmQy97QWRfQA==,type:str]
|
||||||
|
github-token: ENC[AES256_GCM,data:FAuwS/j5kd/NvOVdwa+ROWgMZCjyOjDbIMoU11KkaUOVhnztZyLGCA==,iv:+EvAvf7cUpljLHaxVkBRloZsAYcKjceJHinUU47PCRI=,tag:p0irO6vnt5nr4sZIq9B8gA==,type:str]
|
||||||
age-keys-private:
|
age-keys-private:
|
||||||
matt-desktop-nix: ENC[AES256_GCM,data:7/UO2Oq096iJHSpwA2cflRoiPWrKFJA2RhcuH0bJKM/MO15GbW1VktPZieEVrj+3KTYnhrWr5mEHx+uekhyL2W98SO0JkIJ/c24=,iv:w9lt2rQzkys2HSR8ls4RKJlkNsAb61a+6eB/joKDEtQ=,tag:OYkFVP9HGHumE/3PUP64PA==,type:str]
|
matt-desktop-nix: ENC[AES256_GCM,data:7/UO2Oq096iJHSpwA2cflRoiPWrKFJA2RhcuH0bJKM/MO15GbW1VktPZieEVrj+3KTYnhrWr5mEHx+uekhyL2W98SO0JkIJ/c24=,iv:w9lt2rQzkys2HSR8ls4RKJlkNsAb61a+6eB/joKDEtQ=,tag:OYkFVP9HGHumE/3PUP64PA==,type:str]
|
||||||
admin-jallen-nas: ENC[AES256_GCM,data:lKXCpyB0+wViUYsJgxxe7a4dD24a80xe1XEfvVLoazEb/qmoUClhXU4FI1o8ATvpND4XG/vlq8IsZ3V3Yr2FQSOQTrUxs+Yz1po=,iv:Po0jpfoHNMu4s6EePwD20Kc0HQhnY+YKnwovkqCzviI=,tag:0YHI6cNWV21OH2gMOX/Gmw==,type:str]
|
admin-jallen-nas: ENC[AES256_GCM,data:lKXCpyB0+wViUYsJgxxe7a4dD24a80xe1XEfvVLoazEb/qmoUClhXU4FI1o8ATvpND4XG/vlq8IsZ3V3Yr2FQSOQTrUxs+Yz1po=,iv:Po0jpfoHNMu4s6EePwD20Kc0HQhnY+YKnwovkqCzviI=,tag:0YHI6cNWV21OH2gMOX/Gmw==,type:str]
|
||||||
@@ -154,8 +155,8 @@ sops:
|
|||||||
RU04T3g1Z3JNekJFQ1h4N1ZueUJHN3cK1PmEv0F4IFT5gKOzfOwSmyw/nQcIxSaD
|
RU04T3g1Z3JNekJFQ1h4N1ZueUJHN3cK1PmEv0F4IFT5gKOzfOwSmyw/nQcIxSaD
|
||||||
60qSMPExbM+HOMaRD79zHKIbnzGUnheiuWjlIt+fAjnv+mdiIIQuzw==
|
60qSMPExbM+HOMaRD79zHKIbnzGUnheiuWjlIt+fAjnv+mdiIIQuzw==
|
||||||
-----END AGE ENCRYPTED FILE-----
|
-----END AGE ENCRYPTED FILE-----
|
||||||
lastmodified: "2025-08-24T23:01:20Z"
|
lastmodified: "2025-12-12T02:59:49Z"
|
||||||
mac: ENC[AES256_GCM,data:XBGjbC4kieO4ygvGnQz/pyTmkfSRNzEsy1ifGpqfUMrB84kNMu1IX1SHm4Vvl2UrBj13yOn9/9poRwH8BnoEHcjh9HfYZusTV2hw29vPtEHN1ZX4VRA69pkXnBV6r+Scy2hhNTWE34fafHS/plRGnI2423LlfAOsUv118QCe1Ho=,iv:Wer5tHVAnI4GKKSaJODSazoXLUeN6IVkIF1k4x9/k34=,tag:dnWXCUrxcnoDJnj+Dh6kAg==,type:str]
|
mac: ENC[AES256_GCM,data:hOHsyujX+EHCzHM4vyAoYMohCeH1T/riacfUxV5hkMz4FQdCUG+gfHq1Ym9Z0xwSMCrtr9Oz3vmO6kZTAXa4abXLxS4VmShP+N2TIxD8aX4Z4kC99odfxHalQAxEt32RoEM5DGq5gvIOz/Eyb/av0RZ+iEs5dVQ/8Juo4Gs4mK4=,iv:GqrZitl/sK6TxRzf9smH3AbEhvGIU6dbdlk7+sMZh8M=,tag:zdsXCYGLOf8yyPc1XrpkJg==,type:str]
|
||||||
pgp:
|
pgp:
|
||||||
- created_at: "2025-08-24T02:21:39Z"
|
- created_at: "2025-08-24T02:21:39Z"
|
||||||
enc: |-
|
enc: |-
|
||||||
@@ -178,4 +179,4 @@ sops:
|
|||||||
-----END PGP MESSAGE-----
|
-----END PGP MESSAGE-----
|
||||||
fp: CBCB9B18A6B8930B0B6ABFD1CCB8CBEB30633684
|
fp: CBCB9B18A6B8930B0B6ABFD1CCB8CBEB30633684
|
||||||
unencrypted_suffix: _unencrypted
|
unencrypted_suffix: _unencrypted
|
||||||
version: 3.10.2
|
version: 3.11.0
|
||||||
|
|||||||
Reference in New Issue
Block a user