From 489106956b7749431c35c35f3d1d230f8f1c6e5d Mon Sep 17 00:00:00 2001 From: Leyla Becker Date: Sat, 22 Feb 2025 17:00:05 -0600 Subject: [PATCH] added wireguard sops config --- .sops.yaml | 4 +++ README.md | 2 +- .../nixos/horizon/hardware-configuration.nix | 5 ++++ flake.lock | 26 +++++++++---------- 4 files changed, 23 insertions(+), 14 deletions(-) diff --git a/.sops.yaml b/.sops.yaml index e9ddb56..3f54dcc 100644 --- a/.sops.yaml +++ b/.sops.yaml @@ -9,3 +9,7 @@ creation_rules: key_groups: - age: - *leyla + - path_regex: secrets/wireguard-keys.yaml$ + key_groups: + - age: + - *leyla diff --git a/README.md b/README.md index 4798a5d..c59d815 100644 --- a/README.md +++ b/README.md @@ -32,7 +32,7 @@ nix multi user, multi system, configuration with `sops` secret management, `home `./install.sh --target 192.168.1.130 --flake hostname` ## Updating Secrets -`sops -c sops secrets/secrets_file_here.yaml` +`sops secrets/secrets_file_here.yaml` ## Inspecting a configuration `nix-inspect -p .` diff --git a/configurations/nixos/horizon/hardware-configuration.nix b/configurations/nixos/horizon/hardware-configuration.nix index 48a4680..c94d150 100644 --- a/configurations/nixos/horizon/hardware-configuration.nix +++ b/configurations/nixos/horizon/hardware-configuration.nix @@ -89,6 +89,11 @@ networkmanager.enable = true; useDHCP = lib.mkDefault true; hostName = "horizon"; # Define your hostname. + + wireguard.interfaces = { + proton = { + }; + }; }; nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux"; diff --git a/flake.lock b/flake.lock index 25eef18..e563eb0 100644 --- a/flake.lock +++ b/flake.lock @@ -29,11 +29,11 @@ }, "locked": { "dir": "pkgs/firefox-addons", - "lastModified": 1740164177, - "narHash": "sha256-hNEgYjKKkSICKrmyLBK+Ght7KGxOryiSGiTRViUrKWw=", + "lastModified": 1740212040, + "narHash": "sha256-Gpvn9Z+ZgKPyb6qaAbahLbo6ZVj7VuLzSCmHZRvsACA=", "owner": "rycee", "repo": "nur-expressions", - "rev": "16c8c7e376b09119913bbc4d8e6852b7918ca7cc", + "rev": "9a8a0914000e4453c99a4c12e9862a0a40075851", "type": "gitlab" }, "original": { @@ -114,11 +114,11 @@ ] }, "locked": { - "lastModified": 1740177427, - "narHash": "sha256-1xUiN0Yvvl/r+XyyXiJHxw64FwUGBfKF+XA7Ugm8ElU=", + "lastModified": 1740254115, + "narHash": "sha256-MwxDtYB/MSGZlr/xS+ExGYH2QgHk73ShD40shxjad/Y=", "owner": "nix-community", "repo": "home-manager", - "rev": "9f74e14a2d9af4c6f2024cca7813b830b020f45e", + "rev": "cb3f6e9b59d3a5e51ef9f7da2b8418d5c72aaef8", "type": "github" }, "original": { @@ -171,11 +171,11 @@ ] }, "locked": { - "lastModified": 1740102704, - "narHash": "sha256-Gs3BREQKsFcfkFyes2PTq1tNAkMHq8Tq0bYME7ZhyjY=", + "lastModified": 1740188781, + "narHash": "sha256-3FDg6k9kQXq5M6ZHc2f9KsPydvWBtqacU9lWA7nIFYI=", "owner": "nix-community", "repo": "nix-vscode-extensions", - "rev": "1262db8fa5e165ed5da3d91ec8202bfe640264ef", + "rev": "ba52a14c907e0cece9734e0ff59c3c742b6b1075", "type": "github" }, "original": { @@ -234,11 +234,11 @@ "secrets": { "flake": false, "locked": { - "lastModified": 1730665670, - "narHash": "sha256-MMwH5IcaslEWqeHaNqSjAsGWoS2NJ5qiIE7RLiJG+28=", + "lastModified": 1740265180, + "narHash": "sha256-VcS1aWKZQG1Com/OgL8RbTSG7IJphNLkFXAcFer0cMQ=", "ref": "refs/heads/main", - "rev": "ef623d6a9e25c1f0ec9d282ab5ed5dff54674816", - "revCount": 6, + "rev": "5ec7b1181a3ce76c8238819195f7e55f51407463", + "revCount": 7, "type": "git", "url": "ssh://git@git.jan-leila.com/jan-leila/nix-config-secrets.git" },