moved sops config into common

This commit is contained in:
Leyla Becker 2024-09-15 12:55:31 -05:00
parent 8f8cea0ab2
commit 417aafe2e8
6 changed files with 16 additions and 19 deletions

View file

@ -26,6 +26,19 @@
LC_TIME = "en_US.UTF-8"; LC_TIME = "en_US.UTF-8";
}; };
users.groups.users = {};
sops = {
defaultSopsFile = ../../secrets/secrets.yaml;
defaultSopsFormat = "yaml";
age ={
keyFile = "/var/lib/sops-nix/key.txt";
# sshKeyPaths = ["${config.home.homeDirectory}/.ssh/nix-ed25519"];
# generateKey = true;
};
};
# List packages installed in system profile. # List packages installed in system profile.
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
wget wget

View file

@ -11,17 +11,6 @@
../../enviroments/server ../../enviroments/server
]; ];
sops = {
defaultSopsFile = ../../secrets/secrets.yaml;
defaultSopsFormat = "yaml";
age ={
keyFile = "/home/leyla/.config/sops/age/keys.txt";
# sshKeyPaths = ["${config.home.homeDirectory}/.ssh/nix-ed25519"];
# generateKey = true;
};
};
# home.sessionVariables = { # home.sessionVariables = {
# SOPS_AGE_KEY_FILE = "${config.home.homeDirectory}/.config/sops-nix/key.txt"; # SOPS_AGE_KEY_FILE = "${config.home.homeDirectory}/.config/sops-nix/key.txt";
# }; # };

View file

@ -11,11 +11,6 @@
../../enviroments/client ../../enviroments/client
]; ];
sops.defaultSopsFile = ../../secrets/secrets.yaml;
sops.defaultSopsFormat = "yaml";
sops.age.keyFile = "/home/leyla/.config/sops/age/keys.txt";
users.leyla = { users.leyla = {
isFullUser = true; isFullUser = true;
hasPiperMouse = true; hasPiperMouse = true;

View file

@ -27,7 +27,7 @@ in
( (
if cfg.isFullUser then { if cfg.isFullUser then {
isNormalUser = true; isNormalUser = true;
extraGroups = [ "networkmanager" ]; extraGroups = [ "networkmanager" "users" ];
hashedPasswordFile = config.sops.secrets."passwords/ester".path; hashedPasswordFile = config.sops.secrets."passwords/ester".path;

View file

@ -27,7 +27,7 @@ in
( (
if cfg.isFullUser then { if cfg.isFullUser then {
isNormalUser = true; isNormalUser = true;
extraGroups = [ "networkmanager" ]; extraGroups = [ "networkmanager" "users" ];
hashedPasswordFile = config.sops.secrets."passwords/eve".path; hashedPasswordFile = config.sops.secrets."passwords/eve".path;

View file

@ -37,7 +37,7 @@ in
if (cfg.isFullUser || cfg.isThinUser) then { if (cfg.isFullUser || cfg.isThinUser) then {
isNormalUser = true; isNormalUser = true;
extraGroups = lib.mkMerge [ extraGroups = lib.mkMerge [
["networkmanager" "wheel" "docker"] ["networkmanager" "wheel" "docker" "users"]
( (
lib.mkIf (!cfg.isThinUser) [ "adbusers" ] lib.mkIf (!cfg.isThinUser) [ "adbusers" ]
) )