teutat3s/os
2
0
Fork 0
forked from pub-solar/os
Code Pull requests Activity

mnx: add openvpn connection, update secrets

Browse source
This commit is contained in:
teutat3s 2023-06-09 17:07:15 +02:00
parent 8a2910f10c
commit 244a8b01fb
Signed by: teutat3s
GPG key ID: 4FA1D3FA524F22C1
5 changed files with 20 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

BIN
secrets/environment-secrets.age
View file

Binary file not shown.

BIN
secrets/mnx-bonanza-pf1.ovpn.age Normal file
View file

Binary file not shown.

BIN
secrets/mnx-bonanza-pf1.p12.age Normal file
View file

Binary file not shown.

2
secrets/secrets.nix
View file

@ -15,6 +15,8 @@ in {
"github-api-token.age".publicKeys = allKeys;
"fwknoprc.age".publicKeys = allKeys;
"cat-testenv.ovpn.age".publicKeys = allKeys;
"mnx-bonanza-pf1.ovpn.age".publicKeys = allKeys;
"mnx-bonanza-pf1.p12.age".publicKeys = allKeys;
"docker-ci-runner-secrets.age".publicKeys = allKeys;
"test-secret.age".publicKeys = [users.teutat3s-5-nfc];
}

18
users/teutat3s/mnx.nix
View file

@ -10,6 +10,17 @@ with lib; let
xdg = config.home-manager.users."${psCfg.user.name}".xdg;
in {
config = {
age.secrets."mnx-bonanza-pf1.ovpn" = {
file = "${self}/secrets/mnx-bonanza-pf1.ovpn.age";
mode = "600";
owner = psCfg.user.name;
};
age.secrets."mnx-bonanza-pf1.p12" = {
file = "${self}/secrets/mnx-bonanza-pf1.p12.age";
mode = "600";
owner = psCfg.user.name;
};
environment = {
systemPackages = with pkgs; [
networkmanager-fortisslvpn
@ -17,6 +28,13 @@ in {
];
};
services.openvpn.servers = {
bonanzaVPN = {
config = ''config ${config.age.secrets."mnx-bonanza-pf1.ovpn".path}'';
autoStart = false;
};
};
programs._1password-gui = {
enable = true;
polkitPolicyOwners = ["teutat3s"];