mjallen/nix-config
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

what

Browse Source
This commit is contained in:
mjallen18
2026-01-27 12:34:40 -06:00
parent 14db694b90
commit d2c1cbf987
2 changed files with 8 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
modules/nixos/sops/default.nix
View File

@@ -77,31 +77,31 @@ in
# ------------------------------ # ------------------------------
"secureboot/GUID" = lib.mkIf isx86 { "secureboot/GUID" = lib.mkIf isx86 {
path = "/etc/secureboot/GUID"; path = "/etc/secureboot/GUID";
mode = "0600"; mode = "0640";
}; };
"secureboot/keys/db-key" = lib.mkIf isx86 { "secureboot/keys/db-key" = lib.mkIf isx86 {
path = "/etc/secureboot/keys/db/db.key"; path = "/etc/secureboot/keys/db/db.key";
mode = "0600"; mode = "0640";
}; };
"secureboot/keys/db-pem" = lib.mkIf isx86 { "secureboot/keys/db-pem" = lib.mkIf isx86 {
path = "/etc/secureboot/keys/db/db.pem"; path = "/etc/secureboot/keys/db/db.pem";
mode = "0600"; mode = "0640";
}; };
"secureboot/keys/KEK-key" = lib.mkIf isx86 { "secureboot/keys/KEK-key" = lib.mkIf isx86 {
path = "/etc/secureboot/keys/KEK/KEK.key"; path = "/etc/secureboot/keys/KEK/KEK.key";
mode = "0600"; mode = "0640";
}; };
"secureboot/keys/KEK-pem" = lib.mkIf isx86 { "secureboot/keys/KEK-pem" = lib.mkIf isx86 {
path = "/etc/secureboot/keys/KEK/KEK.pem"; path = "/etc/secureboot/keys/KEK/KEK.pem";
mode = "0600"; mode = "0640";
}; };
"secureboot/keys/PK-key" = lib.mkIf isx86 { "secureboot/keys/PK-key" = lib.mkIf isx86 {
path = "/etc/secureboot/keys/PK/PK.key"; path = "/etc/secureboot/keys/PK/PK.key";
mode = "0600"; mode = "0640";
}; };
"secureboot/keys/PK-pem" = lib.mkIf isx86 { "secureboot/keys/PK-pem" = lib.mkIf isx86 {
path = "/etc/secureboot/keys/PK/PK.pem"; path = "/etc/secureboot/keys/PK/PK.pem";
mode = "0600"; mode = "0640";
}; };
}; };

1
test Normal file
View File

@@ -0,0 +1 @@
age1yn82e39pxt0d0pgny34ux4lkge4ff7wxvsye8ragvwngehemt4ps27phyw