mjallen/nix-config
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

lto server

Browse Source
This commit is contained in:
mjallen18
2025-12-11 21:19:40 -06:00
parent 3364ae8fda
commit 2e4b629805
4 changed files with 197 additions and 191 deletions
Download Patch File Download Diff File Expand all files Collapse all files

37
modules/home/sops/default.nix
View File

@@ -1,29 +1,34 @@
{
config,
lib,
namespace,
...
}:
let
cfg = config.mjallen.sops;
cfg = config.${namespace}.sops;
in
{
imports = [ ./options.nix ];
config = lib.mkIf cfg.enable {
# sops = {
# age.keyFile = "/home/${user}/.config/sops/age/keys.txt";
# defaultSopsFile = "/etc/nixos/secrets/secrets.yaml";
# validateSopsFiles = false;
# secrets = {
# "ssh-keys-public/desktop-nixos" = {
# path = "/home/${user}/.ssh/id_ed25519.pub";
# mode = "0644";
# };
# "ssh-keys-private/desktop-nixos" = {
# path = "/home/${user}/.ssh/id_ed25519";
# mode = "0600";
# };
# };
# };
sops = {
age.keyFile = "/home/${config.${namespace}.user.name}/.config/sops/age/keys.txt";
defaultSopsFile = "/etc/nixos/secrets/secrets.yaml";
validateSopsFiles = false;
secrets = {
"github-token" = { };
};
templates = {
".env".content = ''
GITHUB_TOKEN = "${config.sops.placeholder.github-token}"
'';
};
};
programs.zsh.initExtra = ''
if [ -f ${config.sops.templates.".env".path} ]; then
export $(grep -v '^#' ${config.sops.templates.".env".path} | xargs)
fi
'';
};
}

4
modules/home/sops/options.nix
View File

@@ -1,7 +1,7 @@
{ lib, ... }:
{ lib, namespace, ... }:
with lib;
{
options.mjallen.sops = {
options.${namespace}.sops = {
enable = mkEnableOption "enable sops";
defaultSopsFile = mkOption {

2
packages/linux-cachyos/default.nix
View File

@@ -63,7 +63,7 @@ let
serverLtoKernelAttrs = {
taste = "linux-cachyos-server";
configPath = ./config-nix/cachyos-lto.x86_64-linux.nix;
configPath = ./config-nix/cachyos-server-lto.x86_64-linux.nix;
# Pass the unified arguments (including the resolved 'self') to llvm-pkgs
inherit (import ./lib/llvm-pkgs.nix (args // { inherit self; })) callPackage;

7
secrets/secrets.yaml
View File

@@ -1,6 +1,7 @@
#ENC[AES256_GCM,data:HkOno2ohMSLs46g=,iv:7KHzoElBP/GMIVubcIBya42SoFKVyt/+YRIxkgRE3Cw=,tag:U87dYHrKu/qqbLf5r7XEiA==,type:comment]
wifi: ENC[AES256_GCM,data:Rs+4Km4DogO7XatA,iv:JUv9HkNWsv/l4Fli5sFeUeYuWG1Yju95G59FJ/Q5W50=,tag:gRFCG4d5OBMRx1QayRV8Zg==,type:str]
matt_password: ENC[AES256_GCM,data:/8utn5xMoWIxXitfg2kFZCQwbqqn6rH7Pt5KYeTyGintjg5jF8T9eqdqrBGlqMdKh/YjUTwZZg4/PkNG9/gqk86pjaUtg+8C6w==,iv:BDbThvyXmzB9eKfuK0V2eR8p20g7rOOTOA3AYNCM6TI=,tag:KvIKOLFW9NMmQy97QWRfQA==,type:str]
github-token: ENC[AES256_GCM,data:FAuwS/j5kd/NvOVdwa+ROWgMZCjyOjDbIMoU11KkaUOVhnztZyLGCA==,iv:+EvAvf7cUpljLHaxVkBRloZsAYcKjceJHinUU47PCRI=,tag:p0irO6vnt5nr4sZIq9B8gA==,type:str]
age-keys-private:
matt-desktop-nix: ENC[AES256_GCM,data:7/UO2Oq096iJHSpwA2cflRoiPWrKFJA2RhcuH0bJKM/MO15GbW1VktPZieEVrj+3KTYnhrWr5mEHx+uekhyL2W98SO0JkIJ/c24=,iv:w9lt2rQzkys2HSR8ls4RKJlkNsAb61a+6eB/joKDEtQ=,tag:OYkFVP9HGHumE/3PUP64PA==,type:str]
admin-jallen-nas: ENC[AES256_GCM,data:lKXCpyB0+wViUYsJgxxe7a4dD24a80xe1XEfvVLoazEb/qmoUClhXU4FI1o8ATvpND4XG/vlq8IsZ3V3Yr2FQSOQTrUxs+Yz1po=,iv:Po0jpfoHNMu4s6EePwD20Kc0HQhnY+YKnwovkqCzviI=,tag:0YHI6cNWV21OH2gMOX/Gmw==,type:str]
@@ -154,8 +155,8 @@ sops:
RU04T3g1Z3JNekJFQ1h4N1ZueUJHN3cK1PmEv0F4IFT5gKOzfOwSmyw/nQcIxSaD
60qSMPExbM+HOMaRD79zHKIbnzGUnheiuWjlIt+fAjnv+mdiIIQuzw==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2025-08-24T23:01:20Z"
mac: ENC[AES256_GCM,data:XBGjbC4kieO4ygvGnQz/pyTmkfSRNzEsy1ifGpqfUMrB84kNMu1IX1SHm4Vvl2UrBj13yOn9/9poRwH8BnoEHcjh9HfYZusTV2hw29vPtEHN1ZX4VRA69pkXnBV6r+Scy2hhNTWE34fafHS/plRGnI2423LlfAOsUv118QCe1Ho=,iv:Wer5tHVAnI4GKKSaJODSazoXLUeN6IVkIF1k4x9/k34=,tag:dnWXCUrxcnoDJnj+Dh6kAg==,type:str]
lastmodified: "2025-12-12T02:59:49Z"
mac: ENC[AES256_GCM,data:hOHsyujX+EHCzHM4vyAoYMohCeH1T/riacfUxV5hkMz4FQdCUG+gfHq1Ym9Z0xwSMCrtr9Oz3vmO6kZTAXa4abXLxS4VmShP+N2TIxD8aX4Z4kC99odfxHalQAxEt32RoEM5DGq5gvIOz/Eyb/av0RZ+iEs5dVQ/8Juo4Gs4mK4=,iv:GqrZitl/sK6TxRzf9smH3AbEhvGIU6dbdlk7+sMZh8M=,tag:zdsXCYGLOf8yyPc1XrpkJg==,type:str]
pgp:
- created_at: "2025-08-24T02:21:39Z"
enc: |-
@@ -178,4 +179,4 @@ sops:
-----END PGP MESSAGE-----
fp: CBCB9B18A6B8930B0B6ABFD1CCB8CBEB30633684
unencrypted_suffix: _unencrypted
version: 3.10.2
version: 3.11.0