Use sops input
This commit is contained in:
parent
23737baff3
commit
8a4e6a584b
2 changed files with 19 additions and 18 deletions
|
@ -23,23 +23,23 @@ in
|
||||||
./shared/ssh.nix
|
./shared/ssh.nix
|
||||||
];
|
];
|
||||||
|
|
||||||
# sops = {
|
sops = {
|
||||||
# defaultSopsFile = "./secrets/example.yaml";
|
defaultSopsFile = "./secrets/example.yaml";
|
||||||
# age = {
|
age = {
|
||||||
# sshKeyPaths = [ "/etc/ssh/ssh_host_ed25510_key" ];
|
sshKeyPaths = [ "/etc/ssh/ssh_host_ed25510_key" ];
|
||||||
# keyFile = "/root/.config/sops/age/keys.txt";
|
keyFile = "/root/.config/sops/age/keys.txt";
|
||||||
# generateKey = true;
|
generateKey = true;
|
||||||
# };
|
};
|
||||||
# };
|
};
|
||||||
|
|
||||||
# users.users = {
|
users.users = {
|
||||||
# # connection only via ssh key
|
# connection only via ssh key
|
||||||
# pipeline = {
|
pipeline = {
|
||||||
# isNormalUser = true;
|
isNormalUser = true;
|
||||||
# home = "/home/pipeline";
|
home = "/home/pipeline";
|
||||||
# description = "User used by forgejo runners to connect to this system";
|
description = "User used by forgejo runners to connect to this system";
|
||||||
# extraGroups = [ "docker" ];
|
extraGroups = [ "docker" ];
|
||||||
# openssh.authorizedKeys.keyFiles = [ config.sops.secrets."foo".path ];
|
openssh.authorizedKeys.keyFiles = [ config.sops.secrets."foo".path ];
|
||||||
# };
|
};
|
||||||
# };
|
};
|
||||||
}
|
}
|
||||||
|
|
|
@ -89,6 +89,7 @@
|
||||||
};
|
};
|
||||||
imports = [
|
imports = [
|
||||||
inputs.disko.nixosModules.disko
|
inputs.disko.nixosModules.disko
|
||||||
|
inputs.sops-nix.nixosModules.sops
|
||||||
|
|
||||||
./dev_system.nix
|
./dev_system.nix
|
||||||
|
|
||||||
|
|
Loading…
Reference in a new issue