diff --git a/flake.nix b/flake.nix index 1626281..3bca826 100755 --- a/flake.nix +++ b/flake.nix @@ -540,6 +540,7 @@ { imports = [ ./hosts/deck/home.nix + steamdeck-sops-nix.homeManagerModules.sops steamdeck-steam-rom-manager.homeManagerModules.default ]; }; diff --git a/hosts/deck/home.nix b/hosts/deck/home.nix index e32a1e4..79c571b 100755 --- a/hosts/deck/home.nix +++ b/hosts/deck/home.nix @@ -26,6 +26,22 @@ in home.stateVersion = "23.11"; programs.home-manager.enable = true; + sops = { + age.keyFile = "/home/deck/.config/sops/age/keys.txt"; + defaultSopsFile = "/etc/nixos/secrets/secrets.yaml"; + validateSopsFiles = false; + secrets = { + "ssh-keys-public/deck-deck" = { + path = "/home/deck/.ssh/id_ed25519.pub"; + mode = "0644"; + }; + "ssh-keys-private/deck-deck" = { + path = "/home/deck/.ssh/id_ed25519"; + mode = "0600"; + }; + }; + }; + programs = { mangohud.enable = true; java.enable = true; diff --git a/secrets/secrets.yaml b/secrets/secrets.yaml index 6de0ea4..42c4cb3 100755 --- a/secrets/secrets.yaml +++ b/secrets/secrets.yaml @@ -67,6 +67,7 @@ age-keys-private: admin-jallen-nas: ENC[AES256_GCM,data:lKXCpyB0+wViUYsJgxxe7a4dD24a80xe1XEfvVLoazEb/qmoUClhXU4FI1o8ATvpND4XG/vlq8IsZ3V3Yr2FQSOQTrUxs+Yz1po=,iv:Po0jpfoHNMu4s6EePwD20Kc0HQhnY+YKnwovkqCzviI=,tag:0YHI6cNWV21OH2gMOX/Gmw==,type:str] matt-pi5: ENC[AES256_GCM,data:YgsqvZI6E+hx/GBP0JJjAfPvWig2EKWaBUoYaM/UeFgTamFWgbISrruyqRId8XRoN/BqAunGSvlET9lxcqFDbJ7eUhFaW2m8TCE=,iv:yFeynCcvrVJZxInKrnHtGY/B4ZI49NlmgQeAlNgdAMo=,tag:xKwq8FYHnqh2V2XDwEBz8Q==,type:str] matt-pi4: ENC[AES256_GCM,data:/y6+qjLJd1CEu3TvhFoGcQHI+RAfVz1RWfgI5+amwGk0FJLnm9hIGm74X1LBCpTvHR9i69JBEfbDes1DxU2xoMzIWueSkmy3wjs=,iv:Iii1UXMhInEDIf11urGDCpH3ca60fNip9r92oNj30PU=,tag:YZ0rvbiA7GPeI5HcOsbUbg==,type:str] + deck-deck: ENC[AES256_GCM,data:NHcFI2WXSIn6zs+q7kXrVsQtGs/i1eUI5vdsRiQedPSoMfVbn2kAuw9xYdK/T9tJI4cickP7vHdassX5m4fwRSPmknmVsQnpdHk=,iv:9J4GQ5Ej7TZzecb4qqhP0RxWO9+CHeiWoPpUSa1VjS8=,tag:ysKRalpqz9wkCminP++1hA==,type:str] ssh-keys-public: macbook-macos: ENC[AES256_GCM,data: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,iv:iK5OiEj1fzNkIOcbPeyXB6BVWGWdE9XulzDD/hqjyaM=,tag:mBYYY3Zbr5QQOFqNEXT8oQ==,type:str] desktop-windows: ENC[AES256_GCM,data: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,iv:owBLW+yniaAPd+d6BFXlexNCRekZhAwP+oY+S/p5HD4=,tag:ct5BLa470+BYmzddF7s0hg==,type:str] @@ -76,6 +77,7 @@ ssh-keys-public: jallen-nas-root: ENC[AES256_GCM,data:YcwfZ8Ae3Ch4LPbKEkijVuo2FhlzdApm1XI18upHVw9WkOjfDQjCnHSYXNhOPGYDHFTerd69A4YByNAJmI+ZhUFRk0j8JQyAAqrTqfQEv+bOjoAfXDNcwr2TEr0MpNAB,iv:np7bSSsauo10y/gt58HNNwtRNPaA5iK6+mDke+lmVjw=,tag:YNJhCBjWpYP2YCx8QFy1FA==,type:str] pi4: ENC[AES256_GCM,data:8k8SVyG1zw7F3aN0RdNauIpmVK5Dy3D+CrA8favzEPpSsrE8kQKupe0lLEkb4nDiVRty0wrDYdu3zbr/IikmvrwglREwCXEeK+PwIVMFysgw5N17BTwFG5M=,iv:ImANnD1Tm3z4p2BlJbm4u+uSnS9IZKfsj3Oo1mKQH3Y=,tag:B0gYd0OAt/Mjs9coBeyCsA==,type:str] pi5: ENC[AES256_GCM,data:TgyyaEF8oTRVM8y2wrz7rqevQfDWM2qgdCpw4ak5fh5Ad5QGexKgvAK3qD6T/2LRLDZV+PpzR08PmfDPxwEev2zqmxsk6OZEwkcrcxnqF7mtbKhmr9rl8jY=,iv:VNFYVwXadlj2hGutwx5jvxVyutmvnNCFC77cNLG1ZDA=,tag:RJH/27yAiIw6ED9cYN77rA==,type:str] + deck: ENC[AES256_GCM,data:xUHlFtL36OyMghXQCSIJKFER1Wvwr1b1zHmpkNzMqqs2KTQP/6rlbLWN3T7cfDcrc4Ot3hdlBg3liQcyNgdpFf4O2QiY3vqzzGX5gmNbTuYrDegGjogHyuJSvg==,iv:qZhkriv1H0gH6204px4tGs8EQZRdJW0uhCB4Xx6AwUc=,tag:w1CzPWx9qnojwrUK3ZBj8A==,type:str] ssh-keys-private: desktop-nixos: ENC[AES256_GCM,data:nmZyje3ohrq7PUiaPMmD18S5WV5Vwc+cBc3sl8J+lYSPbnKf9vR9XpLi6twaAkJD0KzaPvbKbBmUka20M8j8RAFir0WOYI6c97Ql6r6QxcoJg+h1f1JCDLmPYzMk5bdP5xivkIG0oXIpcYP5aBVbbC7G5+aqTYKJsd553E2wuvqv5PGSXl1hN4q/JC4/DEJx1mJq7j1O+IQAxk1B44+O/Omgd+r6pALWQjA2EdCYk2ReDDF5hlVc/2TIC4vPzVFnPFqt/5LuhOah3HV7xqw8AV73QGMF0KHDYLGH70fgFBD0Wr0uR4jXWmzfhN5bKkNBRuY4A6EyXF57r1Nc4sxpK2ltHSEOuibJWi9R1E+h5rmb65sAMgxkWn6sGL3G5smC0VuLaDrYuyjFx782V9aWUvQr2h2AaU1Z7+h6VL/adq1U4gRkvK8a/+7IsTnSHTzMMnfY7jYIrWjmxNBwUEpqXAZFAFI7qP+29b2fdWYmoup/thvMthCri7NiXsX95Qgf7CQ/+qoKENwZw9TgLtJtbBBks2vEuHcVh7PO,iv:jgiF188WAPqEy8WWaHJImzlLV2NNTFnNHW3Le7aLJ1Y=,tag:iCCDSahE8/LSajZd0Mt3LQ==,type:str] desktop-nixos-root: ENC[AES256_GCM,data:oIBAoV0MyASXKUf8YhncfvnvXZJsXumWf1t2dibJ8AQZn7AU9RdWrHmToStn0QH3wqqiZH0ZFRnQ5rzCjXz75UTM1CZ0K8SnPDVIgzsExzMSFWz0xXKCPiagR7iDs3E5T341+qG92MAYUoVHEO+LPFE1HItiZyTTgdbJ8tz4My3GXpJ+3ExGAO7nlF1CgCuV++IsU7pW3GAgi1+v+V/lrZxkdZikM1ayYDfMGa5//Tlx55W5zR9GYm4vd4/HwIij/DrEueZAw/4i3WOhd77afosYkboKtZb82m296UfyhJEFeMQvSvjpNvqIc9KStMjxuV07QXE3HZooGRZx6HYJtHHKxf9HcEvgvGNi4nIUoGFb2+pWmWk6Usxo2S6aZM5k96UGrQGdDZzRZZHA2K0gBCVOsdz91M8egsevZEzB6ADxLmkwsobOMRY9Dm91zBMCOI97YestSMQC1ilAevF844c8augaszPRxfwGocuZE+Z99bsQTzJBiTsTgmp1xHaYswP1CLfoeUg8NeDHWmXzIQaqBf96O0kSEWtB,iv:2cTIm3wgcyOgKBUNYZbokI3HRRWTA3/9IHu94KOBUww=,tag:98dLCYVfGcCdXPEDiIV9Uw==,type:str] @@ -83,6 +85,7 @@ ssh-keys-private: jallen-nas-root: ENC[AES256_GCM,data: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,iv:+RvxMeW3J8xNfiU0xGKyQk55MJlwg+RL3Rff7NPexF4=,tag:f4P3dW05wDn4k/ed4xLz9g==,type:str] pi4: ENC[AES256_GCM,data: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,iv:b9HDOuwZwith6JHDikzh0KvTCMINrHkridp4rq44JS4=,tag:fwJiK/MmV3PCtGU6M1BnGw==,type:str] pi5: ENC[AES256_GCM,data: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,iv:PWO8mqAZKrYF1AMzkjH3F20DNc7Gm6eadeb3LT7jHog=,tag:GLiPUhXkoRAgZK2OZ4y4Bg==,type:str] + deck: ENC[AES256_GCM,data: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,iv:QXWNEnaaGHVhO9mWJ+5yJ1332nt2NAxdWbgpmB2RRRw=,tag:1GEJExH7m6ttrie6j7muSA==,type:str] secureboot: GUID: ENC[AES256_GCM,data:EPkYpJAHYEAXRQQKkB6WHXdtdnyoMvPV0BjfxMYfD/F2LrQc,iv:yK+2bSfWHnJ+qTQ2F18Of/qrultrX5cwYLgEZEWj1z4=,tag:D2WTSLS3ZZ5vZ4VQg8ltZA==,type:str] keys: @@ -98,6 +101,9 @@ pi5: pi4: sys-public-key: ENC[AES256_GCM,data:OJYVHTSVoMWP7BKJUPi6AHw504QpMVHwCDW/SJtchxhGj22LnnFEGGL5pYvM48tM0PZbr2IvUYMRaGl/wPT6ZGnoeaA2aDpnlaN2YOLms9VSDYfdeKd4z24=,iv:tSP9bcjKQXvErWWryX+ZGM9gvns2Qu2rnoyiCBXs43M=,tag:U8ggYsVx9ofURiUmUHTUUQ==,type:str] sys-priv-key: ENC[AES256_GCM,data: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,iv:fJs9GJkntWVzwMYOKHT0V/lc8tc6L0tQOjCT7CPfpFg=,tag:xeg6yT5svSXJm1I48Zh8PA==,type:str] +deck: + sys-public-key: ENC[AES256_GCM,data:DJNR7yH87yQWtB/0OrQ1Ix2+Q8HKZ5m0z62ial3aIp+ISWK31znpxANLDt4CJzswWLOXlRHGpX56sU0ylOkDsrM7oGI3pnt2BBYL0MjaM9pLSWzERdhVtmkmTw==,iv:bFpxTkNp48E/Ft8f69ly3fIQPP5dOORgySjtbdiIyNw=,tag:QCnC3H+mVTaKbaKm7tjNgw==,type:str] + sys-priv-key: ENC[AES256_GCM,data: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,iv:sHjOJPdefHnPyiECq0Pson6F6kOrB+M47tZWIed9n5I=,tag:OpfJ45GiHui49cRThZph8g==,type:str] sops: age: - recipient: age157jemphjzg6zmk373vpccuguyw6e75qnkqmz8pcnn2yue85p939swqqhy0 @@ -190,7 +196,7 @@ sops: THgvY1JGS3gwNUdhSXVEd25kcndFbEUKvTRzMYgIsYxK0Kmbq8JhpwAjqzX5AC87 5pnLllSogskDIHNmKga+WiL2FyZtkFXW7x4jGW+oOLdZ5mWxAt8yJg== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-05-18T23:58:00Z" - mac: ENC[AES256_GCM,data:nvQuAwSP2We341SLYBsMIVGwHFtog1Qd0Bpm5mCsiET9aMFV0xsXcdxJiHg+xo2dxdkW6l/H0eQRQnRk1RJ0XK7QsxpJebWy4ryRFXmdn8dCwybtROIQyHuB8ict97mlhDNigu9q6h+e97J0Uvo5E8qNbn76S9L54E5IPJOzlvI=,iv:L4uhNCeRZ7va6LrL/vDEvUDHfa2E6OFJnhE4+TyKw14=,tag:r3UXhMl1EWCaRRjI2q4gcA==,type:str] + lastmodified: "2025-05-27T20:55:46Z" + mac: ENC[AES256_GCM,data:TQp1VRw0Qdu2HhFS57mqgSas69shFDqbmqMl0mNs4zYUVxVHc8h5DHAO0GJ1qPZmU3ETRVw3vDv5Y1OaQQf2mIYxtwiJPMyR7TtTgrNGIvJRADBiHW2hMLEX/XldSX7P7fjJ2houTKfNpiJ/L7NKK/KdjsBO/RC5hxyDgd6T48Q=,iv:/+zlI8KHOgXE5LO7VPRdUT5asH5BPUKlzKhHqwwBzXg=,tag:C61mLFH9SH//f4kTc1LSeA==,type:str] unencrypted_suffix: _unencrypted version: 3.10.2