changed env var for sops files
This commit is contained in:
parent
44aae0065d
commit
bd7e575868
|
@ -63,11 +63,11 @@
|
||||||
isSystemUser = true;
|
isSystemUser = true;
|
||||||
};
|
};
|
||||||
|
|
||||||
# pihole = {
|
pihole = {
|
||||||
# uid = 2003;
|
uid = 2003;
|
||||||
# group = "forgejo";
|
group = "pihole";
|
||||||
# isSystemUser = true;
|
isSystemUser = true;
|
||||||
# };
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
groups = {
|
groups = {
|
||||||
|
@ -88,7 +88,7 @@
|
||||||
|
|
||||||
users = {
|
users = {
|
||||||
gid = 100;
|
gid = 100;
|
||||||
members = ["lelya" "ester" "eve"];
|
members = ["leyla" "ester" "eve"];
|
||||||
};
|
};
|
||||||
|
|
||||||
jellyfin = {
|
jellyfin = {
|
||||||
|
@ -106,10 +106,10 @@
|
||||||
members = ["forgejo" "leyla"];
|
members = ["forgejo" "leyla"];
|
||||||
};
|
};
|
||||||
|
|
||||||
# pihole = {
|
pihole = {
|
||||||
# gid = 2003;
|
gid = 2003;
|
||||||
# members = ["pihole" "leyla"];
|
members = ["pihole" "leyla"];
|
||||||
# };
|
};
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
|
@ -126,6 +126,11 @@
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
|
environment.sessionVariables = rec {
|
||||||
|
AGE_KEY_DIRECTORY = "/var/lib/sops-nix";
|
||||||
|
AGE_KEY_FILE = "${AGE_KEY_DIRECTORY}/key.txt";
|
||||||
|
};
|
||||||
|
|
||||||
sops = {
|
sops = {
|
||||||
defaultSopsFormat = "yaml";
|
defaultSopsFormat = "yaml";
|
||||||
gnupg.sshKeyPaths = [];
|
gnupg.sshKeyPaths = [];
|
||||||
|
@ -136,10 +141,6 @@
|
||||||
# generateKey = true;
|
# generateKey = true;
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
environment.sessionVariables = {
|
|
||||||
AGE_KEY_FILE_LOCATION = "/var/lib/sops-nix/";
|
|
||||||
};
|
|
||||||
|
|
||||||
# List packages installed in system profile.
|
# List packages installed in system profile.
|
||||||
environment.systemPackages = with pkgs; [
|
environment.systemPackages = with pkgs; [
|
||||||
wget
|
wget
|
||||||
|
|
|
@ -47,8 +47,8 @@ cleanup() {
|
||||||
trap cleanup EXIT
|
trap cleanup EXIT
|
||||||
|
|
||||||
# copy key file to temp folder to copy over to target
|
# copy key file to temp folder to copy over to target
|
||||||
mkdir -p $temp$AGE_KEY_FILE_LOCATION
|
mkdir -p $temp$AGE_KEY_DIRECTORY
|
||||||
cp -r $AGE_KEY_FILE_LOCATION/* $temp$AGE_KEY_FILE_LOCATION
|
cp -r $AGE_KEY_DIRECTORY/* $temp$AGE_KEY_DIRECTORY
|
||||||
|
|
||||||
# commit number in this is because the main branch of nixos-anywhere is broken right now
|
# commit number in this is because the main branch of nixos-anywhere is broken right now
|
||||||
nix run github:nix-community/nixos-anywhere/b3b6bfebba35d55fba485ceda588984dec74c54f -- --extra-files $temp --flake ".#$flake" ${user:-nixos}@$target
|
nix run github:nix-community/nixos-anywhere/b3b6bfebba35d55fba485ceda588984dec74c54f -- --extra-files $temp --flake ".#$flake" ${user:-nixos}@$target
|
||||||
|
|
Loading…
Reference in a new issue