@ -1,5 +1,11 @@
|
||||
{inputs, ...}: let
|
||||
secretsPath = builtins.toString inputs.mysecrets;
|
||||
{
|
||||
config,
|
||||
inputs,
|
||||
...
|
||||
}: let
|
||||
s = inputs.mysecrets;
|
||||
hostname = config.networking.hostName;
|
||||
sopsFile = "${s}/hosts/${hostname}.yaml";
|
||||
in {
|
||||
imports = with inputs; [
|
||||
sops-nix.nixosModules.sops
|
||||
@ -11,7 +17,7 @@ in {
|
||||
keyFile = "/var/lib/sops-nix/key.txt";
|
||||
generateKey = true;
|
||||
};
|
||||
defaultSopsFile = "${secretsPath}/secrets.yaml";
|
||||
defaultSopsFile = "${s}/common.yaml";
|
||||
secrets = {
|
||||
"user-password-hashed".neededForUsers = true;
|
||||
"ssh-config" = {
|
||||
@ -19,12 +25,14 @@ in {
|
||||
mode = "0400";
|
||||
owner = "user";
|
||||
};
|
||||
"ssh-eldrid-user" = {
|
||||
"ssh-${hostname}-user" = {
|
||||
inherit sopsFile;
|
||||
path = "/home/user/.ssh/id_ed25519";
|
||||
mode = "0400";
|
||||
owner = "user";
|
||||
};
|
||||
"ssh-eldrid-user.pub" = {
|
||||
"ssh-${hostname}-user.pub" = {
|
||||
inherit sopsFile;
|
||||
path = "/home/user/.ssh/id_ed25519.pub";
|
||||
mode = "0400";
|
||||
owner = "user";
|
||||
|
Reference in New Issue
Block a user