mirror of
https://github.com/genebean/dots.git
synced 2026-03-28 09:57:43 -04:00
wip
This commit is contained in:
parent
9388f2ac16
commit
9506f7f70c
7 changed files with 245 additions and 1 deletions
|
|
@ -180,9 +180,10 @@ Nix installs and configures Atuin, but you still need to log into the server:
|
|||
### Post-install
|
||||
|
||||
1. clone this repo
|
||||
2. create keys for [SOPS](https://georgheiler.com/2023/12/01/securing-secrets-with-mozilla-sops-and-age-a-powerful-combo/) via `mkdir -p ~/.config/sops/age && nix run nixpkgs#ssh-to-age -- -private-key -i ~/.ssh/id_ed25519 > ~/.config/sops/age/keys.txt && nix run nixpkgs#ssh-to-age -- -i ~/.ssh/id_ed25519.pub > ~/.config/sops/age/pub-keys.txt`
|
||||
2. create keys for [SOPS](https://georgheiler.com/2023/12/01/securing-secrets-with-mozilla-sops-and-age-a-powerful-combo/) via `mkdir -p ~/.config/sops/age && nix --extra-experimental-features "nix-command flakes" run nixpkgs#ssh-to-age -- -private-key -i ~/.ssh/id_ed25519 > ~/.config/sops/age/keys.txt && nix --extra-experimental-features "nix-command flakes" run nixpkgs#ssh-to-age -- -i ~/.ssh/id_ed25519.pub > ~/.config/sops/age/pub-keys.txt`
|
||||
3. copy output of `~/.config/sops/age/pub-keys.txt`
|
||||
4. add entries to `.sops.yaml`
|
||||
5. run `mkdir modules/hosts/nixos/$(hostname)`
|
||||
5. run `sops modules/hosts/nixos/$(hostname)/secrets.yaml`
|
||||
- if there is an empty yaml file in where you target you will get an error... just delete it and try again
|
||||
6. edit `sops modules/hosts/nixos/$(hostname)/default.nix` and add the Tailscale service and the block of config for sops.
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue