Setup and utilize SOPS

This commit is contained in:
Gene Liverman 2023-12-18 15:34:47 -05:00
parent 0fc27eb75f
commit 5ab4df18b2
14 changed files with 213 additions and 14 deletions

View file

@ -1,4 +1,4 @@
{ inputs, config, pkgs, username, ... }: {
{ inputs, config, hostname, pkgs, sops-nix, username, ... }: {
imports = [
./hardware-configuration.nix
];
@ -72,7 +72,6 @@
enable = true;
openFirewall = true;
};
openssh.enable = true;
tailscale = {
extraUpFlags = [
"--advertise-exit-node"
@ -82,6 +81,21 @@
};
};
sops = {
age.keyFile = /home/${username}/.config/sops/age/keys.txt;
defaultSopsFile = ./secrets.yaml;
secrets = {
local_git_config = {
owner = "${username}";
path = "/home/${username}/.gitconfig-local";
};
local_private_env = {
owner = "${username}";
path = "/home/${username}/.private-env";
};
};
};
users.users.${username} = {
isNormalUser = true;
description = "Gene Liverman";