hosts/chocolatebar/chocolatebar.nix

@@ -1,4 +1,4 @@
-{ config, pkgs, lib, ... }:
+{ config, pkgs, lib, self, ... }:
 with lib;
 let
   psCfg = config.pub-solar;
@@ -24,6 +24,18 @@ in
       wayvnc
     ];
 
+    age.secrets."vnc-key.pem" = {
+      file = "${self}/secrets/vnc-key-chocolatebar.pem";
+      mode = "700";
+      owner = psCfg.user.name;
+    };
+    age.secrets."vnc-cert.pem" = {
+      file = "${self}/secrets/vnc-cert-chocolatebar.pem";
+      mode = "700";
+      owner = psCfg.user.name;
+    };
+    pub-solar.sway.vnc.enable = true;
+
     home-manager.users."${psCfg.user.name}".xdg.configFile = mkIf psCfg.sway.enable {
       "sway/config.d/10-autostart.conf".source = ./.config/sway/config.d/autostart.conf;
       "sway/config.d/10-input-defaults.conf".source = ./.config/sway/config.d/input-defaults.conf;

secrets/secrets.nix

@@ -39,5 +39,8 @@ in
   "crypto_keyfile-chocolatebar.bin".publicKeys = chocolatebarKeys;
   "hdd_keyfile-chocolatebar.bin".publicKeys = chocolatebarKeys;
 
+  "vnc-cert-chocolatebar.pem".publicKeys = chocolatebarKeys;
+  "vnc-key-chocolatebar.pem".publicKeys = chocolatebarKeys;
+
   "mopidy.conf".publicKeys = allKeys;
 }

users/ben/home.nix

@@ -11,6 +11,7 @@ in
 
   home-manager = pkgs.lib.setAttrByPath [ "users" psCfg.user.name ] {
     home.packages = with pkgs; [
+      tigervnc
       dogecoin
       nodejs
       itch
@@ -88,7 +89,7 @@ in
     # xdg.configFile."wallpaper.jpg".source = ./assets/wallpaper.jpg;
   };
 
-  age.secrets = pkgs.lib.setAttrByPath [ "mopidy.conf" ] {
+  age.secrets."mopidy.conf" = {
     file = "${self}/secrets/mopidy.conf";
     mode = "700";
     owner = "mopidy";