Use sops input

This commit is contained in:
hodasemi 2025-05-22 12:49:23 +02:00
parent 23737baff3
commit 8a4e6a584b
2 changed files with 19 additions and 18 deletions

View file

@ -23,23 +23,23 @@ in
./shared/ssh.nix ./shared/ssh.nix
]; ];
# sops = { sops = {
# defaultSopsFile = "./secrets/example.yaml"; defaultSopsFile = "./secrets/example.yaml";
# age = { age = {
# sshKeyPaths = [ "/etc/ssh/ssh_host_ed25510_key" ]; sshKeyPaths = [ "/etc/ssh/ssh_host_ed25510_key" ];
# keyFile = "/root/.config/sops/age/keys.txt"; keyFile = "/root/.config/sops/age/keys.txt";
# generateKey = true; generateKey = true;
# }; };
# }; };
# users.users = { users.users = {
# # connection only via ssh key # connection only via ssh key
# pipeline = { pipeline = {
# isNormalUser = true; isNormalUser = true;
# home = "/home/pipeline"; home = "/home/pipeline";
# description = "User used by forgejo runners to connect to this system"; description = "User used by forgejo runners to connect to this system";
# extraGroups = [ "docker" ]; extraGroups = [ "docker" ];
# openssh.authorizedKeys.keyFiles = [ config.sops.secrets."foo".path ]; openssh.authorizedKeys.keyFiles = [ config.sops.secrets."foo".path ];
# }; };
# }; };
} }

View file

@ -89,6 +89,7 @@
}; };
imports = [ imports = [
inputs.disko.nixosModules.disko inputs.disko.nixosModules.disko
inputs.sops-nix.nixosModules.sops
./dev_system.nix ./dev_system.nix