moved sops config into common
This commit is contained in:
		
							parent
							
								
									d22f470e24
								
							
						
					
					
						commit
						88ab5420eb
					
				
					 6 changed files with 16 additions and 19 deletions
				
			
		|  | @ -26,6 +26,19 @@ | ||||||
|     LC_TIME = "en_US.UTF-8"; |     LC_TIME = "en_US.UTF-8"; | ||||||
|   }; |   }; | ||||||
| 
 | 
 | ||||||
|  |   users.groups.users = {}; | ||||||
|  | 
 | ||||||
|  |   sops = { | ||||||
|  |     defaultSopsFile = ../../secrets/secrets.yaml; | ||||||
|  |     defaultSopsFormat = "yaml"; | ||||||
|  | 
 | ||||||
|  |     age ={ | ||||||
|  |       keyFile = "/var/lib/sops-nix/key.txt"; | ||||||
|  |       # sshKeyPaths = ["${config.home.homeDirectory}/.ssh/nix-ed25519"]; | ||||||
|  |       # generateKey = true; | ||||||
|  |     }; | ||||||
|  |   }; | ||||||
|  | 
 | ||||||
|   # List packages installed in system profile. |   # List packages installed in system profile. | ||||||
|   environment.systemPackages = with pkgs; [ |   environment.systemPackages = with pkgs; [ | ||||||
|     wget |     wget | ||||||
|  |  | ||||||
|  | @ -11,17 +11,6 @@ | ||||||
|       ../../enviroments/server |       ../../enviroments/server | ||||||
|     ]; |     ]; | ||||||
| 
 | 
 | ||||||
|   sops = { |  | ||||||
|     defaultSopsFile = ../../secrets/secrets.yaml; |  | ||||||
|     defaultSopsFormat = "yaml"; |  | ||||||
| 
 |  | ||||||
|     age ={ |  | ||||||
|       keyFile = "/home/leyla/.config/sops/age/keys.txt"; |  | ||||||
|       # sshKeyPaths = ["${config.home.homeDirectory}/.ssh/nix-ed25519"]; |  | ||||||
|       # generateKey = true; |  | ||||||
|     }; |  | ||||||
|   }; |  | ||||||
| 
 |  | ||||||
|   # home.sessionVariables = { |   # home.sessionVariables = { | ||||||
|   #   SOPS_AGE_KEY_FILE = "${config.home.homeDirectory}/.config/sops-nix/key.txt"; |   #   SOPS_AGE_KEY_FILE = "${config.home.homeDirectory}/.config/sops-nix/key.txt"; | ||||||
|   # }; |   # }; | ||||||
|  |  | ||||||
|  | @ -11,11 +11,6 @@ | ||||||
|       ../../enviroments/client |       ../../enviroments/client | ||||||
|     ]; |     ]; | ||||||
| 
 | 
 | ||||||
|   sops.defaultSopsFile = ../../secrets/secrets.yaml; |  | ||||||
|   sops.defaultSopsFormat = "yaml"; |  | ||||||
| 
 |  | ||||||
|   sops.age.keyFile = "/home/leyla/.config/sops/age/keys.txt"; |  | ||||||
| 
 |  | ||||||
|   users.leyla = { |   users.leyla = { | ||||||
|     isFullUser = true; |     isFullUser = true; | ||||||
|     hasPiperMouse = true; |     hasPiperMouse = true; | ||||||
|  |  | ||||||
|  | @ -27,7 +27,7 @@ in | ||||||
|       ( |       ( | ||||||
|         if cfg.isFullUser then { |         if cfg.isFullUser then { | ||||||
|           isNormalUser = true; |           isNormalUser = true; | ||||||
|           extraGroups = [ "networkmanager" ]; |           extraGroups = [ "networkmanager" "users" ]; | ||||||
| 
 | 
 | ||||||
|           hashedPasswordFile = config.sops.secrets."passwords/ester".path; |           hashedPasswordFile = config.sops.secrets."passwords/ester".path; | ||||||
| 
 | 
 | ||||||
|  |  | ||||||
|  | @ -27,7 +27,7 @@ in | ||||||
|       ( |       ( | ||||||
|         if cfg.isFullUser then { |         if cfg.isFullUser then { | ||||||
|           isNormalUser = true; |           isNormalUser = true; | ||||||
|           extraGroups = [ "networkmanager" ]; |           extraGroups = [ "networkmanager" "users" ]; | ||||||
| 
 | 
 | ||||||
|           hashedPasswordFile = config.sops.secrets."passwords/eve".path; |           hashedPasswordFile = config.sops.secrets."passwords/eve".path; | ||||||
| 
 | 
 | ||||||
|  |  | ||||||
|  | @ -37,7 +37,7 @@ in | ||||||
|         if (cfg.isFullUser || cfg.isThinUser) then { |         if (cfg.isFullUser || cfg.isThinUser) then { | ||||||
|           isNormalUser = true; |           isNormalUser = true; | ||||||
|           extraGroups = lib.mkMerge [ |           extraGroups = lib.mkMerge [ | ||||||
|             ["networkmanager" "wheel" "docker"] |             ["networkmanager" "wheel" "docker" "users"] | ||||||
|             ( |             ( | ||||||
|               lib.mkIf (!cfg.isThinUser) [ "adbusers" ] |               lib.mkIf (!cfg.isThinUser) [ "adbusers" ] | ||||||
|             ) |             ) | ||||||
|  |  | ||||||
		Loading…
	
	Add table
		Add a link
		
	
		Reference in a new issue