nixy: cleanup config
This commit is contained in:
parent
82efa133b3
commit
7a647287bb
@ -13,31 +13,35 @@
|
|||||||
system.stateVersion = "23.05";
|
system.stateVersion = "23.05";
|
||||||
system.autoUpgrade.enable = false;
|
system.autoUpgrade.enable = false;
|
||||||
|
|
||||||
sops.age.sshKeyPaths = ["/etc/ssh/ssh_host_ed25519_key"];
|
sops = {
|
||||||
sops.secrets."peerix/private" = {
|
age.sshKeyPaths = ["/etc/ssh/ssh_host_ed25519_key"];
|
||||||
|
secrets = {
|
||||||
|
"peerix/private" = {
|
||||||
sopsFile = ./secrets/peerix.yaml;
|
sopsFile = ./secrets/peerix.yaml;
|
||||||
mode = "0400";
|
mode = "0400";
|
||||||
owner = config.users.users.nobody.name;
|
owner = config.users.users.nobody.name;
|
||||||
group = config.users.users.nobody.group;
|
group = config.users.users.nobody.group;
|
||||||
};
|
};
|
||||||
|
|
||||||
sops.secrets."wg_privkey" = {
|
"wg_privkey" = {
|
||||||
sopsFile = ./secrets/wg_privkey.yaml;
|
sopsFile = ./secrets/wg_privkey.yaml;
|
||||||
};
|
};
|
||||||
|
|
||||||
sops.secrets."wg_preshared/nixy" = {
|
"wg_preshared/nixy" = {
|
||||||
sopsFile = ../common/secrets/wg_preshared.yaml;
|
sopsFile = ../common/secrets/wg_preshared.yaml;
|
||||||
};
|
};
|
||||||
|
|
||||||
sops.secrets."borgbase_enc_key" = {
|
"borgbase_enc_key" = {
|
||||||
sopsFile = ./secrets/borgbase_enc_key.yaml;
|
sopsFile = ./secrets/borgbase_enc_key.yaml;
|
||||||
owner = config.users.users.akill.name;
|
owner = config.users.users.akill.name;
|
||||||
};
|
};
|
||||||
|
|
||||||
sops.secrets."borgbase_ssh_key" = {
|
"borgbase_ssh_key" = {
|
||||||
sopsFile = ./secrets/borgbase_ssh_key.yaml;
|
sopsFile = ./secrets/borgbase_ssh_key.yaml;
|
||||||
owner = config.users.users.akill.name;
|
owner = config.users.users.akill.name;
|
||||||
};
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
nix = {
|
nix = {
|
||||||
optimise.automatic = true;
|
optimise.automatic = true;
|
||||||
@ -412,7 +416,7 @@
|
|||||||
enable = true;
|
enable = true;
|
||||||
driSupport = true;
|
driSupport = true;
|
||||||
driSupport32Bit = true;
|
driSupport32Bit = true;
|
||||||
extraPackages = with pkgs; [];
|
extraPackages = [];
|
||||||
};
|
};
|
||||||
rtl-sdr.enable = true;
|
rtl-sdr.enable = true;
|
||||||
};
|
};
|
||||||
|
Loading…
Reference in New Issue
Block a user