diff --git a/hosts/default/configuration.nix b/hosts/default/configuration.nix index 2ea60f6..cf0ea6b 100644 --- a/hosts/default/configuration.nix +++ b/hosts/default/configuration.nix @@ -17,8 +17,12 @@ sops.defaultSopsFormat = "yaml"; sops.age.keyFile = "/home/itsscb/.config/sops/age/keys.txt"; - sops.secrets."nas" = {}; - + sops.secrets."nas" = { + owner = config.users.users.itsscb.name; + }; + sops.secrets."git" = { + owner = config.users.users.itsscb.name; + }; # Bootloader. boot.loader.systemd-boot.enable = true; boot.loader.efi.canTouchEfiVariables = true; @@ -152,7 +156,7 @@ home-manager = { extraSpecialArgs = { inherit inputs; }; backupFileExtension = "backup"; users = { - "itsscb" = import ./home.nix; + "itsscb" = import ./home.nix; # ( config.sops.secrets."git"); "root" = { home.stateVersion = "23.11"; home.file.".config/helix".source = ../../dotfiles/helix; diff --git a/hosts/default/home.nix b/hosts/default/home.nix index e7a5302..2bf0090 100644 --- a/hosts/default/home.nix +++ b/hosts/default/home.nix @@ -1,6 +1,9 @@ { config, pkgs, inputs, ... }: { + # imports = [ + # inputs.sops-nix.nixosModules.sops + # ]; home.username = "itsscb"; home.homeDirectory = "/home/itsscb"; @@ -93,6 +96,10 @@ enable = true; userName = "itsscb"; userEmail = "dev@itsscb.de"; + # credential.helper = "store ${config.sops.secrets."git".path}"; + # init = { + # defaultBranch = "main"; + # }; }; vim = { diff --git a/secrets/secrets.yaml b/secrets/secrets.yaml index 854edae..3b2b8ca 100644 --- a/secrets/secrets.yaml +++ b/secrets/secrets.yaml @@ -1,4 +1,5 @@ nas: ENC[AES256_GCM,data:JIb5+hJg7XdnDoCD3wH++6mX8YBmSEeiFdB8iuHZXhGC4OKo8eJWaIs=,iv:fG0EFEDvriHf9IeDaiYJZojB3I+FJhQQXU4Z49CmTU0=,tag:5UAcQ0IH4+B1OE2p1RkeDw==,type:str] +git: ENC[AES256_GCM,data:vy+lo01bQk1X88edUWIpOYeQGJAtienrgBa9KALQBZBapK+5aX62LlTxK1qT2edZthEGu2RTSeuaA1NYsW4bhoB+hdFrh+r3DKdUIdwltiGZmgv/feEiIgYA/6rozlgN9koKkSY59Qe3KSmRokJtctEwYw==,iv:ylrLUoTOlyPMfaB0V8Lv2SYz9jSxvDrO2T0gMaBA364=,tag:Xgl54U/tDJVc7t4Pbbl7Bw==,type:str] sops: kms: [] gcp_kms: [] @@ -14,8 +15,8 @@ sops: bTFXejdDWldUaUQyaUE0My9UQm1RencKyKM5CyU2qIygoM+9ZmvxfTW6DIn2HTf8 9GHcmPnwRnIOPreuS5H1zGHnq4A5OJo6/ToLLabiAqSFbd5+W8EPkQ== -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-05-08T21:16:29Z" - mac: ENC[AES256_GCM,data:x3pl9lvklsuf730s5EEDuiYulmbsKlrKdid2tuH1HFgTYRcvzEwXaOEWj9HQ27gT3UcVuQflwo8YEFW7GGs27jYHDyy3FeTcuoagNZvlxlVS5MBTjN4nAYU2sq2ykE8yZanORwLgE3vuQFyXE9416K+ZbcybpmRTLRZ0xxW4+yw=,iv:2BvL8DboJbgFHkgRXglW7LCk73AeFf1CdNxiDu/FGb8=,tag:2FaNkwrkP1B9AdPzs+35CA==,type:str] + lastmodified: "2024-05-08T21:27:31Z" + mac: ENC[AES256_GCM,data:AKAwUObvzJlRzm2H3hz9pHPM/gfUUVxvwklWZKLIQVSZZ1ptVXsDnGdoKwuyJ2eB3N4XjsbaYGYKcIHXcrhJyALyubRiShYOvfHeK2nZpv+vBBPJeHVb4PCzMZC4TkstvJD9aMCIibzVxMS6YfhQPbgDMJkPFn1R+Qn98Nr5NXo=,iv:wMefUcpi6wXDfd38aSjdJleZXHauokNIUJs7uQJDk10=,tag:G5Cjg/6Zbr4GILL3IqKJ+Q==,type:str] pgp: [] unencrypted_suffix: _unencrypted version: 3.8.1