changed env var for sops files
This commit is contained in:
parent
44aae0065d
commit
bd7e575868
|
@ -63,11 +63,11 @@
|
|||
isSystemUser = true;
|
||||
};
|
||||
|
||||
# pihole = {
|
||||
# uid = 2003;
|
||||
# group = "forgejo";
|
||||
# isSystemUser = true;
|
||||
# };
|
||||
pihole = {
|
||||
uid = 2003;
|
||||
group = "pihole";
|
||||
isSystemUser = true;
|
||||
};
|
||||
};
|
||||
|
||||
groups = {
|
||||
|
@ -88,7 +88,7 @@
|
|||
|
||||
users = {
|
||||
gid = 100;
|
||||
members = ["lelya" "ester" "eve"];
|
||||
members = ["leyla" "ester" "eve"];
|
||||
};
|
||||
|
||||
jellyfin = {
|
||||
|
@ -106,10 +106,10 @@
|
|||
members = ["forgejo" "leyla"];
|
||||
};
|
||||
|
||||
# pihole = {
|
||||
# gid = 2003;
|
||||
# members = ["pihole" "leyla"];
|
||||
# };
|
||||
pihole = {
|
||||
gid = 2003;
|
||||
members = ["pihole" "leyla"];
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
|
@ -126,6 +126,11 @@
|
|||
};
|
||||
};
|
||||
|
||||
environment.sessionVariables = rec {
|
||||
AGE_KEY_DIRECTORY = "/var/lib/sops-nix";
|
||||
AGE_KEY_FILE = "${AGE_KEY_DIRECTORY}/key.txt";
|
||||
};
|
||||
|
||||
sops = {
|
||||
defaultSopsFormat = "yaml";
|
||||
gnupg.sshKeyPaths = [];
|
||||
|
@ -136,10 +141,6 @@
|
|||
# generateKey = true;
|
||||
};
|
||||
};
|
||||
environment.sessionVariables = {
|
||||
AGE_KEY_FILE_LOCATION = "/var/lib/sops-nix/";
|
||||
};
|
||||
|
||||
# List packages installed in system profile.
|
||||
environment.systemPackages = with pkgs; [
|
||||
wget
|
||||
|
|
|
@ -47,8 +47,8 @@ cleanup() {
|
|||
trap cleanup EXIT
|
||||
|
||||
# copy key file to temp folder to copy over to target
|
||||
mkdir -p $temp$AGE_KEY_FILE_LOCATION
|
||||
cp -r $AGE_KEY_FILE_LOCATION/* $temp$AGE_KEY_FILE_LOCATION
|
||||
mkdir -p $temp$AGE_KEY_DIRECTORY
|
||||
cp -r $AGE_KEY_DIRECTORY/* $temp$AGE_KEY_DIRECTORY
|
||||
|
||||
# commit number in this is because the main branch of nixos-anywhere is broken right now
|
||||
nix run github:nix-community/nixos-anywhere/b3b6bfebba35d55fba485ceda588984dec74c54f -- --extra-files $temp --flake ".#$flake" ${user:-nixos}@$target
|
||||
|
|
Loading…
Reference in a new issue