dennis/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Sets up agenix

Browse source
This commit is contained in:
Dennis Schoepf 2025-04-25 16:26:53 +02:00
parent b2df5a314e
commit aa80f0d708
2 changed files with 26 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

6
flake.nix
View file

@ -2,6 +2,7 @@
description = "dnsc-server NixOS flake"; description = "dnsc-server NixOS flake";
inputs = { inputs = {
inputs.agenix.url = "github:ryantm/agenix";
nixpkgs.url = "github:NixOS/nixpkgs/nixpkgs-unstable"; nixpkgs.url = "github:NixOS/nixpkgs/nixpkgs-unstable";
home-manager = { home-manager = {
url = "github:nix-community/home-manager"; url = "github:nix-community/home-manager";
@ -29,7 +30,10 @@
nixosConfigurations.dnsc-vps-sm = nixpkgs.lib.nixosSystem { nixosConfigurations.dnsc-vps-sm = nixpkgs.lib.nixosSystem {
system = "x86_64-linux"; system = "x86_64-linux";
specialArgs = {inherit inputs outputs;}; specialArgs = {inherit inputs outputs;};
modules = [./hosts/dnsc-vps-sm]; modules = [
./hosts/dnsc-vps-sm
agenix.nixosModules.default
];
}; };
darwinConfigurations.dnsc-air = nix-darwin.lib.darwinSystem { darwinConfigurations.dnsc-air = nix-darwin.lib.darwinSystem {

21
secrets/secrets.nix Normal file
View file

@ -0,0 +1,21 @@
let
dnsc-air = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILvXWZOPOJJDAoF+Sx/ZLoAVu6G/7/MAWoknBgMAzjul dennis@dnsc-mac";
dnsc-vps-sm = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHHS4Cq3G0yjoXB9qargJc/zbZdlClnJOcLxSC5ROo7h dennis@dnsc-vps-sm";
dnsc-server = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM3mkEgvHrwjsEReHQHpLbMP71JLvp6XxMPyW7PTaLCd dennis@dnsc-server";
systems = [ dnsc-air dnsc-vps-sm dnsc-server ];
in
{
# Add like this: "secret1.age".publicKeys = systems;
}
# 1. Create a file with secret
# nix run github:ryantm/agenix -- -e $FILE_PATH
#
# 2. Reference the file in NixOS config:
# {
# age.secrets.secret1.file = ../secrets/secret1.age;
# }
#
# 3. And use it like this:
# passwordFile = config.age.secrets.secret1.path;