moved sops config into common
This commit is contained in:
parent
d22f470e24
commit
88ab5420eb
|
@ -26,6 +26,19 @@
|
||||||
LC_TIME = "en_US.UTF-8";
|
LC_TIME = "en_US.UTF-8";
|
||||||
};
|
};
|
||||||
|
|
||||||
|
users.groups.users = {};
|
||||||
|
|
||||||
|
sops = {
|
||||||
|
defaultSopsFile = ../../secrets/secrets.yaml;
|
||||||
|
defaultSopsFormat = "yaml";
|
||||||
|
|
||||||
|
age ={
|
||||||
|
keyFile = "/var/lib/sops-nix/key.txt";
|
||||||
|
# sshKeyPaths = ["${config.home.homeDirectory}/.ssh/nix-ed25519"];
|
||||||
|
# generateKey = true;
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
# List packages installed in system profile.
|
# List packages installed in system profile.
|
||||||
environment.systemPackages = with pkgs; [
|
environment.systemPackages = with pkgs; [
|
||||||
wget
|
wget
|
||||||
|
|
|
@ -11,17 +11,6 @@
|
||||||
../../enviroments/server
|
../../enviroments/server
|
||||||
];
|
];
|
||||||
|
|
||||||
sops = {
|
|
||||||
defaultSopsFile = ../../secrets/secrets.yaml;
|
|
||||||
defaultSopsFormat = "yaml";
|
|
||||||
|
|
||||||
age ={
|
|
||||||
keyFile = "/home/leyla/.config/sops/age/keys.txt";
|
|
||||||
# sshKeyPaths = ["${config.home.homeDirectory}/.ssh/nix-ed25519"];
|
|
||||||
# generateKey = true;
|
|
||||||
};
|
|
||||||
};
|
|
||||||
|
|
||||||
# home.sessionVariables = {
|
# home.sessionVariables = {
|
||||||
# SOPS_AGE_KEY_FILE = "${config.home.homeDirectory}/.config/sops-nix/key.txt";
|
# SOPS_AGE_KEY_FILE = "${config.home.homeDirectory}/.config/sops-nix/key.txt";
|
||||||
# };
|
# };
|
||||||
|
|
|
@ -11,11 +11,6 @@
|
||||||
../../enviroments/client
|
../../enviroments/client
|
||||||
];
|
];
|
||||||
|
|
||||||
sops.defaultSopsFile = ../../secrets/secrets.yaml;
|
|
||||||
sops.defaultSopsFormat = "yaml";
|
|
||||||
|
|
||||||
sops.age.keyFile = "/home/leyla/.config/sops/age/keys.txt";
|
|
||||||
|
|
||||||
users.leyla = {
|
users.leyla = {
|
||||||
isFullUser = true;
|
isFullUser = true;
|
||||||
hasPiperMouse = true;
|
hasPiperMouse = true;
|
||||||
|
|
|
@ -27,7 +27,7 @@ in
|
||||||
(
|
(
|
||||||
if cfg.isFullUser then {
|
if cfg.isFullUser then {
|
||||||
isNormalUser = true;
|
isNormalUser = true;
|
||||||
extraGroups = [ "networkmanager" ];
|
extraGroups = [ "networkmanager" "users" ];
|
||||||
|
|
||||||
hashedPasswordFile = config.sops.secrets."passwords/ester".path;
|
hashedPasswordFile = config.sops.secrets."passwords/ester".path;
|
||||||
|
|
||||||
|
|
|
@ -27,7 +27,7 @@ in
|
||||||
(
|
(
|
||||||
if cfg.isFullUser then {
|
if cfg.isFullUser then {
|
||||||
isNormalUser = true;
|
isNormalUser = true;
|
||||||
extraGroups = [ "networkmanager" ];
|
extraGroups = [ "networkmanager" "users" ];
|
||||||
|
|
||||||
hashedPasswordFile = config.sops.secrets."passwords/eve".path;
|
hashedPasswordFile = config.sops.secrets."passwords/eve".path;
|
||||||
|
|
||||||
|
|
|
@ -37,7 +37,7 @@ in
|
||||||
if (cfg.isFullUser || cfg.isThinUser) then {
|
if (cfg.isFullUser || cfg.isThinUser) then {
|
||||||
isNormalUser = true;
|
isNormalUser = true;
|
||||||
extraGroups = lib.mkMerge [
|
extraGroups = lib.mkMerge [
|
||||||
["networkmanager" "wheel" "docker"]
|
["networkmanager" "wheel" "docker" "users"]
|
||||||
(
|
(
|
||||||
lib.mkIf (!cfg.isThinUser) [ "adbusers" ]
|
lib.mkIf (!cfg.isThinUser) [ "adbusers" ]
|
||||||
)
|
)
|
||||||
|
|
Loading…
Reference in a new issue