diff --git a/hosts/server/secrets/default.nix b/hosts/server/secrets/default.nix index f1598ed..14941c2 100644 --- a/hosts/server/secrets/default.nix +++ b/hosts/server/secrets/default.nix @@ -1,4 +1,4 @@ -{ inputs, ... }: { +{ pkgs, ... }: { sops = { age.keyFile = "/home/hadi/.config/sops/age/keys.txt"; defaultSopsFile = ./secrets.yaml; @@ -17,8 +17,13 @@ nextcloud-pwd = { path = "/etc/nextcloud/pwd.txt"; }; adguard-pwd = { }; hoarder = { }; - wireguard-pia = { owner = "torrenter"; }; - recyclarr = { owner = "recyclarr"; }; + recyclarr = { + owner = "recyclarr"; + mode = "0777"; + }; + wireguard-pia = { }; }; }; + + environment.systemPackages = with pkgs; [ sops age ]; } diff --git a/hosts/server/secrets/secrets.yaml b/hosts/server/secrets/secrets.yaml index dcac86c..16184ff 100644 --- a/hosts/server/secrets/secrets.yaml +++ b/hosts/server/secrets/secrets.yaml @@ -6,7 +6,6 @@ adguard-pwd: ENC[AES256_GCM,data:QavwLWENAURnRrFwiLntkiM=,iv:bxdQfBxNL5rwUr7CEKb hoarder: ENC[AES256_GCM,data:8A3eGqIlHJ2XpC2OdMNBXPm+5BdfMlOfTSgiibPtM+SFyiPtGhjWQNmVCD9REf0P2C4pikZ3R7vtwyKpjrraaoSAY7ztAk9eqqikorIzD8hn8wbHz/y+Eko=,iv:ngoVgF348IxokWGQVpbpTGhdIwjOOA6T8qLb1wX6GEU=,tag:+v9HLUksQJ1e2vRR/5fzEg==,type:str] recyclarr: ENC[AES256_GCM,data:XgQ5ZQHY/OKucvJGb6NQND9/zzi2E+W3y9gtQJEUL9uIUWbiZdEt9XHB7dMXl9MIjOjAlCNKIzUMXkgccKA3PbVgbaKUMh3oXmTVHVqmRHrFwCwZMAUTQeOvwgeYYHkw,iv:Fyb16m+E6ToRzC5JGKTxhPzFwhdqaZ9liWUtMGpQ9O8=,tag:fdlpq40dAU2UzOJTVNuHSg==,type:str] wireguard-pia: ENC[AES256_GCM,data:TBbhTqKvnjSQu8Tc2QieLrIeP36JEcKMeJ2xMzsTrGSgKnyrnm4CUjSsluYpD5TXpt5z2BSQVG0K5XqT0c5q7N16jk6KyDAjZEHm9gMCWlywh2oQWxpjw8G3jFiiHkH055Me8jVtTUF4d+gpMu/LMA4TZlaCMjVEkcYoHsdhWRpKZWDs98D35oSVX7BEUgc8WIWtyDc1QjJ0Chi6Mw1+C9h3njLoLe/esdS/KV9nJSBB9OsSt11V5Dl5NQDnr+cV0CytC9vHDoYX9+s6ZASom13MBjs8SHQBsteQcboSB/WglO93NIA1VQ/hwDZnCQ25u89Z7oMVMR+NNQ==,iv:1AGrXUDY55wc60t489Vf+YUreiFeo77aAtj29EBnPi4=,tag:djY1xJqSCoIth7++ZokwhA==,type:str] -noise-private-key: ENC[AES256_GCM,data:xAcxtW55X1qa6nLv9tAovRrUO7KnXd4CUuXofnBlTNr1xfyV0SqLOkgbQG+UE6zFrqQNxTWHdqO61DgGpz+C0kM=,iv:j207PkHcnlNgSdcasN9FTN8fQkGaEXW7Gw9bhrTqiow=,tag:AQwNcui4V0bAUppCjq4xAA==,type:str] sops: kms: [] gcp_kms: [] @@ -22,8 +21,8 @@ sops: TEc5d01RaVFGNXc3dlljM0FTTHpENjQKOqwI+pl8UxVIVl43glnOYvW660/PsDGY yefODJGVtHrOm3yeXC2xlTi3sFW+c5wUl2yPqddbvcBt5Ud/yd4iXQ== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-03-24T09:17:47Z" - mac: ENC[AES256_GCM,data:mxPU1SWvmlH5bZCzNqPlZ6CRZ+VqWBVqKL67/k0Nelu+hjCvqgnQBsyMElAVVMYC2jkggKKg7SqA74z148+kZdv4c1/LAVyyiEYs33jTwwA96QY1jxsOULhhHG+j3WulSgu0jwftJwXogoSjznPWjk8/aHn6mEhNRQB9LLZxCiE=,iv:IJQpTzIuOIHe3m/jXJyGsJJYZLcANt6ks8MPZpOo3nA=,tag:7OTWxhMzvLTAT/8mp8purA==,type:str] + lastmodified: "2025-03-24T12:14:53Z" + mac: ENC[AES256_GCM,data:iIQADIb6T/D7Zmq+3egSQKqsEuCP66E9EO98IMgxLBc7trR8VFjHX6vZWkcOVQYUXaOq/LyYMtgwdQ+zfxmiu1/sfflRFDeYpvSjC2pxXARSTfsYq18BwJo8rnQmMm7A8NyQjzmpAjo8bCTgFlNXhQd54vJCIeJGmsZKeXDGHg0=,iv:XBtl+1ssfkuR3P1pQ6Q7k+neuzam9UdTAS+UJcvQqB4=,tag:5YITncXhThWIOMK7NLsv0Q==,type:str] pgp: [] unencrypted_suffix: _unencrypted version: 3.9.4