axeman/pub-solar-os
1
0
Fork 0
forked from pub-solar/os
Code Issues Pull requests Packages Projects Releases Wiki Activity

agenix: init environment-secrets

Browse source
This commit is contained in:
teutat3s 2021-10-24 01:14:04 +02:00
parent f2d20739e0
commit 3bb6c8bc66
Signed by untrusted user: teutat3s
GPG key ID: 4FA1D3FA524F22C1
5 changed files with 10 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
hosts/dumpyourvms/dumpyourvms.nix
View file

@ -1,4 +1,4 @@
{ config, pkgs, lib, ... }: { config, pkgs, lib, self, ... }:
with lib; with lib;
let let
psCfg = config.pub-solar; psCfg = config.pub-solar;
@ -10,7 +10,12 @@ in
]; ];
config = { config = {
pub-solar.x-os.keyfile = "/etc/nixos/hosts/dumpyourvms/secrets/keyfile.bin"; age.secrets.environment-secrets = {
file = "${self}/secrets/environment-secrets.age";
mode = "700";
owner = "teutat3s";
};
pub-solar.virtualisation.enable = true; pub-solar.virtualisation.enable = true;
# fix backlight for keyboard and brightness, adjust function key binding # fix backlight for keyboard and brightness, adjust function key binding

BIN
secrets/environment-secrets.age Executable file
View file

Binary file not shown.

1
secrets/secrets.nix
View file

@ -6,4 +6,5 @@ let
in in
{ {
"example-secret.age".publicKeys = allKeys; "example-secret.age".publicKeys = allKeys;
"environment-secrets.age".publicKeys = allKeys;
} }

2
users/teutat3s/session-variables.nix
View file

@ -6,7 +6,7 @@ in
{ {
home-manager = pkgs.lib.setAttrByPath [ "users" psCfg.user.name ] { home-manager = pkgs.lib.setAttrByPath [ "users" psCfg.user.name ] {
home.sessionVariables = { home.sessionVariables = {
DRONE_SERVER = "https://drone.greenbaum.cloud"; DRONE_SERVER = "https://ci.b12f.io";
}; };
}; };
} }

1
users/teutat3s/zshrc.nix
View file

@ -83,4 +83,5 @@ pkgs:
complete -o nospace -C ${pkgs.waypoint}/bin/waypoint waypoint complete -o nospace -C ${pkgs.waypoint}/bin/waypoint waypoint
complete -C '${pkgs.awscli2}/bin/aws_completer' ${pkgs.awscli2}/bin/aws complete -C '${pkgs.awscli2}/bin/aws_completer' ${pkgs.awscli2}/bin/aws
source /run/secrets/environment-secrets
'' ''