mjallen/nix-config
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

clean up secrets files some

Browse Source
This commit is contained in:
mjallen18
2025-05-28 21:31:41 -05:00
parent dd18dcadb9
commit af06d7fc2e
14 changed files with 684 additions and 94 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
hosts/pi4/sops.nix
View File

@@ -4,15 +4,17 @@ let
in
{
sops = {
defaultSopsFile = ../../secrets/secrets.yaml;
defaultSopsFile = ../../secrets/pi4-secrets.yaml;
age.keyFile = /home/matt/.config/sops/age/keys.txt;
# ------------------------------
# Secrets
# ------------------------------
secrets = {
"wifi" = { };
"desktop/matt_password" = {
"wifi" = {
sopsFile = ../../secrets/secrets.yaml;
};
"pi4/matt-password" = {
neededForUsers = true;
mode = "0600";
owner = config.users.users."${user}".name;
@@ -24,18 +26,21 @@ in
# ------------------------------
"ssh-keys-public/pi4" = {
sopsFile = ../../secrets/secrets.yaml;
mode = "0644";
owner = config.users.users."${user}".name;
group = config.users.users."${user}".group;
restartUnits = [ "sshd.service" ];
};
"ssh-keys-private/pi4" = {
sopsFile = ../../secrets/secrets.yaml;
mode = "0600";
owner = config.users.users."${user}".name;
group = config.users.users."${user}".group;
restartUnits = [ "sshd.service" ];
};
"ssh-keys-public/pi5" = {
sopsFile = ../../secrets/secrets.yaml;
neededForUsers = true;
mode = "0600";
owner = config.users.users.root.name;