itsscb/nixos
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ch/prepares git credentials in sops

Browse Source
This commit is contained in:
itsscb 2024-05-08 23:46:51 +02:00
parent e44aa41378
commit 7b84ec14b2
3 changed files with 17 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
hosts/default/configuration.nix
View File

@ -17,8 +17,12 @@
sops.defaultSopsFormat = "yaml"; sops.defaultSopsFormat = "yaml";
sops.age.keyFile = "/home/itsscb/.config/sops/age/keys.txt"; sops.age.keyFile = "/home/itsscb/.config/sops/age/keys.txt";
sops.secrets."nas" = {}; sops.secrets."nas" = {
owner = config.users.users.itsscb.name;
};
sops.secrets."git" = {
owner = config.users.users.itsscb.name;
};
# Bootloader. # Bootloader.
boot.loader.systemd-boot.enable = true; boot.loader.systemd-boot.enable = true;
boot.loader.efi.canTouchEfiVariables = true; boot.loader.efi.canTouchEfiVariables = true;
@ -152,7 +156,7 @@ home-manager = {
extraSpecialArgs = { inherit inputs; }; extraSpecialArgs = { inherit inputs; };
backupFileExtension = "backup"; backupFileExtension = "backup";
users = { users = {
"itsscb" = import ./home.nix; "itsscb" = import ./home.nix; # ( config.sops.secrets."git");
"root" = { "root" = {
home.stateVersion = "23.11"; home.stateVersion = "23.11";
home.file.".config/helix".source = ../../dotfiles/helix; home.file.".config/helix".source = ../../dotfiles/helix;

7
hosts/default/home.nix
View File

@ -1,6 +1,9 @@
{ config, pkgs, inputs, ... }: { config, pkgs, inputs, ... }:
{ {
# imports = [
# inputs.sops-nix.nixosModules.sops
# ];
home.username = "itsscb"; home.username = "itsscb";
home.homeDirectory = "/home/itsscb"; home.homeDirectory = "/home/itsscb";
@ -93,6 +96,10 @@
enable = true; enable = true;
userName = "itsscb"; userName = "itsscb";
userEmail = "dev@itsscb.de"; userEmail = "dev@itsscb.de";
# credential.helper = "store ${config.sops.secrets."git".path}";
# init = {
# defaultBranch = "main";
# };
}; };
vim = { vim = {

5
secrets/secrets.yaml
View File

@ -1,4 +1,5 @@
nas: ENC[AES256_GCM,data:JIb5+hJg7XdnDoCD3wH++6mX8YBmSEeiFdB8iuHZXhGC4OKo8eJWaIs=,iv:fG0EFEDvriHf9IeDaiYJZojB3I+FJhQQXU4Z49CmTU0=,tag:5UAcQ0IH4+B1OE2p1RkeDw==,type:str] nas: ENC[AES256_GCM,data:JIb5+hJg7XdnDoCD3wH++6mX8YBmSEeiFdB8iuHZXhGC4OKo8eJWaIs=,iv:fG0EFEDvriHf9IeDaiYJZojB3I+FJhQQXU4Z49CmTU0=,tag:5UAcQ0IH4+B1OE2p1RkeDw==,type:str]
git: ENC[AES256_GCM,data:vy+lo01bQk1X88edUWIpOYeQGJAtienrgBa9KALQBZBapK+5aX62LlTxK1qT2edZthEGu2RTSeuaA1NYsW4bhoB+hdFrh+r3DKdUIdwltiGZmgv/feEiIgYA/6rozlgN9koKkSY59Qe3KSmRokJtctEwYw==,iv:ylrLUoTOlyPMfaB0V8Lv2SYz9jSxvDrO2T0gMaBA364=,tag:Xgl54U/tDJVc7t4Pbbl7Bw==,type:str]
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
@ -14,8 +15,8 @@ sops:
bTFXejdDWldUaUQyaUE0My9UQm1RencKyKM5CyU2qIygoM+9ZmvxfTW6DIn2HTf8 bTFXejdDWldUaUQyaUE0My9UQm1RencKyKM5CyU2qIygoM+9ZmvxfTW6DIn2HTf8
9GHcmPnwRnIOPreuS5H1zGHnq4A5OJo6/ToLLabiAqSFbd5+W8EPkQ== 9GHcmPnwRnIOPreuS5H1zGHnq4A5OJo6/ToLLabiAqSFbd5+W8EPkQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-05-08T21:16:29Z" lastmodified: "2024-05-08T21:27:31Z"
mac: ENC[AES256_GCM,data:x3pl9lvklsuf730s5EEDuiYulmbsKlrKdid2tuH1HFgTYRcvzEwXaOEWj9HQ27gT3UcVuQflwo8YEFW7GGs27jYHDyy3FeTcuoagNZvlxlVS5MBTjN4nAYU2sq2ykE8yZanORwLgE3vuQFyXE9416K+ZbcybpmRTLRZ0xxW4+yw=,iv:2BvL8DboJbgFHkgRXglW7LCk73AeFf1CdNxiDu/FGb8=,tag:2FaNkwrkP1B9AdPzs+35CA==,type:str] mac: ENC[AES256_GCM,data:AKAwUObvzJlRzm2H3hz9pHPM/gfUUVxvwklWZKLIQVSZZ1ptVXsDnGdoKwuyJ2eB3N4XjsbaYGYKcIHXcrhJyALyubRiShYOvfHeK2nZpv+vBBPJeHVb4PCzMZC4TkstvJD9aMCIibzVxMS6YfhQPbgDMJkPFn1R+Qn98Nr5NXo=,iv:wMefUcpi6wXDfd38aSjdJleZXHauokNIUJs7uQJDk10=,tag:G5Cjg/6Zbr4GILL3IqKJ+Q==,type:str]
pgp: [] pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.8.1 version: 3.8.1