added sos-nix for home-manager.
This commit is contained in:
		
							parent
							
								
									b04ab13d39
								
							
						
					
					
						commit
						8c552faa1b
					
				
					 13 changed files with 73 additions and 20 deletions
				
			
		| 
						 | 
				
			
			@ -28,7 +28,7 @@
 | 
			
		|||
    address = "gabevenberg@gmail.com";
 | 
			
		||||
    primary = true;
 | 
			
		||||
    flavor = "gmail.com";
 | 
			
		||||
    passwordCommand = "cat ~/keys/plaintext/gmail";
 | 
			
		||||
    passwordCommand = "cat ${config.sops.secrets.gmail-password.path}";
 | 
			
		||||
    realName = "Gabe Venberg";
 | 
			
		||||
 | 
			
		||||
    himalaya.enable = true;
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
							
								
								
									
										19
									
								
								configs/home-manager/secrets.nix
									
										
									
									
									
										Normal file
									
								
							
							
						
						
									
										19
									
								
								configs/home-manager/secrets.nix
									
										
									
									
									
										Normal file
									
								
							| 
						 | 
				
			
			@ -0,0 +1,19 @@
 | 
			
		|||
{
 | 
			
		||||
  inputs,
 | 
			
		||||
  config,
 | 
			
		||||
  lib,
 | 
			
		||||
  pkgs,
 | 
			
		||||
  ...
 | 
			
		||||
}: let
 | 
			
		||||
  secretsDirectory = builtins.toString inputs.nix-secrets;
 | 
			
		||||
in {
 | 
			
		||||
  sops = {
 | 
			
		||||
    defaultSopsFile = "${secretsDirectory}/common.yaml";
 | 
			
		||||
    validateSopsFiles = false;
 | 
			
		||||
    age = {
 | 
			
		||||
      sshKeyPaths = ["${config.home.homeDirectory}/.ssh/id_ed25519"];
 | 
			
		||||
      keyFile = "${config.home.homeDirectory}/.config/sops-nix/key.txt";
 | 
			
		||||
      generateKey = true;
 | 
			
		||||
    };
 | 
			
		||||
  };
 | 
			
		||||
}
 | 
			
		||||
| 
						 | 
				
			
			@ -11,12 +11,12 @@ in {
 | 
			
		|||
    inputs.sops-nix.homeManagerModules.sops
 | 
			
		||||
  ];
 | 
			
		||||
 | 
			
		||||
  sops={
 | 
			
		||||
    defaultSopsFile="${secretsPath}/secrets.yaml";
 | 
			
		||||
    age={
 | 
			
		||||
      sshKeyPaths=["${config.home.homeDirectory}/keys/age/master.txt"];
 | 
			
		||||
      keyFile="/var/lib/sops-nix/key.txt";
 | 
			
		||||
      generateKey=true;
 | 
			
		||||
  sops = {
 | 
			
		||||
    defaultSopsFile = "${secretsPath}/secrets.yaml";
 | 
			
		||||
    age = {
 | 
			
		||||
      sshKeyPaths = ["${config.home.homeDirectory}/keys/age/master.txt"];
 | 
			
		||||
      keyFile = "/var/lib/sops-nix/key.txt";
 | 
			
		||||
      generateKey = true;
 | 
			
		||||
    };
 | 
			
		||||
  };
 | 
			
		||||
}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -31,7 +31,7 @@
 | 
			
		|||
          ];
 | 
			
		||||
          sasl = {
 | 
			
		||||
            username = "toric";
 | 
			
		||||
            pem = "${config.home.homeDirectory}/keys/certs/irc.pem";
 | 
			
		||||
            pem = config.sops.secrets.irc-cert.path;
 | 
			
		||||
          };
 | 
			
		||||
        }
 | 
			
		||||
      ];
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
		Loading…
	
	Add table
		Add a link
		
	
		Reference in a new issue