asmir/nixos_flake_config
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nixy: cleanup config

Browse Source
This commit is contained in:
Asmir A 2024-05-11 09:26:49 +02:00
parent 82efa133b3
commit 7a647287bb
Signed by: asmir
GPG Key ID: 020C42B7A9ABA3E2
1 changed files with 25 additions and 21 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

46
nixy/configuration.nix
View File

@ -13,30 +13,34 @@
system.stateVersion = "23.05"; system.stateVersion = "23.05";
system.autoUpgrade.enable = false; system.autoUpgrade.enable = false;
sops.age.sshKeyPaths = ["/etc/ssh/ssh_host_ed25519_key"]; sops = {
sops.secrets."peerix/private" = { age.sshKeyPaths = ["/etc/ssh/ssh_host_ed25519_key"];
sopsFile = ./secrets/peerix.yaml; secrets = {
mode = "0400"; "peerix/private" = {
owner = config.users.users.nobody.name; sopsFile = ./secrets/peerix.yaml;
group = config.users.users.nobody.group; mode = "0400";
}; owner = config.users.users.nobody.name;
group = config.users.users.nobody.group;
};
sops.secrets."wg_privkey" = { "wg_privkey" = {
sopsFile = ./secrets/wg_privkey.yaml; sopsFile = ./secrets/wg_privkey.yaml;
}; };
sops.secrets."wg_preshared/nixy" = { "wg_preshared/nixy" = {
sopsFile = ../common/secrets/wg_preshared.yaml; sopsFile = ../common/secrets/wg_preshared.yaml;
}; };
sops.secrets."borgbase_enc_key" = { "borgbase_enc_key" = {
sopsFile = ./secrets/borgbase_enc_key.yaml; sopsFile = ./secrets/borgbase_enc_key.yaml;
owner = config.users.users.akill.name; owner = config.users.users.akill.name;
}; };
sops.secrets."borgbase_ssh_key" = { "borgbase_ssh_key" = {
sopsFile = ./secrets/borgbase_ssh_key.yaml; sopsFile = ./secrets/borgbase_ssh_key.yaml;
owner = config.users.users.akill.name; owner = config.users.users.akill.name;
};
};
}; };
nix = { nix = {
@ -412,7 +416,7 @@
enable = true; enable = true;
driSupport = true; driSupport = true;
driSupport32Bit = true; driSupport32Bit = true;
extraPackages = with pkgs; []; extraPackages = [];
}; };
rtl-sdr.enable = true; rtl-sdr.enable = true;
}; };