mirror of
https://github.com/anotherhadi/nixy.git
synced 2026-08-21 18:55:47 +02:00
Hadi
49 lines
1.0 KiB
Nix
49 lines
1.0 KiB
Nix
# Those are my secrets, encrypted with sops
|
|
# You shouldn't import this file, unless you edit it
|
|
{
|
|
pkgs,
|
|
config,
|
|
...
|
|
}: let
|
|
username = config.var.username;
|
|
home = "/home/${username}";
|
|
in {
|
|
sops = {
|
|
age.keyFile = "${home}/.config/sops/age/keys.txt";
|
|
defaultSopsFile = ./secrets.yaml;
|
|
secrets = {
|
|
hashedPassword.neededForUsers = true;
|
|
|
|
ssh-config = {
|
|
owner = username;
|
|
path = "${home}/.ssh/config";
|
|
};
|
|
ssh-github-key = {
|
|
owner = username;
|
|
path = "${home}/.ssh/github";
|
|
};
|
|
anotherhadi-pgp-key = {
|
|
owner = username;
|
|
path = "${home}/.ssh/anotherhadi-priv.asc";
|
|
};
|
|
ssh-jack-key = {
|
|
owner = username;
|
|
path = "${home}/.ssh/jack";
|
|
};
|
|
signing-key = {
|
|
owner = username;
|
|
path = "${home}/.ssh/key";
|
|
};
|
|
signing-pub-key = {
|
|
owner = username;
|
|
path = "${home}/.ssh/key.pub";
|
|
};
|
|
};
|
|
};
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
sops
|
|
age
|
|
];
|
|
}
|