darkkirb/nixos-config
1
0
Fork 0
Code Issues 1 Pull requests 2 Projects Releases Packages Wiki Activity Actions

add keys
All checks were successful
Hydra nixosConfigurations.container-default-x86_64-linux Hydra build #23677 of nixos-config:pr618:nixosConfigurations.container-default-x86_64-linux
Details
Hydra nixosConfigurations.container-default-riscv64-linux Hydra build #23676 of nixos-config:pr618:nixosConfigurations.container-default-riscv64-linux
Details
Hydra nixosConfigurations.container-default-aarch64-linux Hydra build #23675 of nixos-config:pr618:nixosConfigurations.container-default-aarch64-linux
Details
Hydra nixosConfigurations.not522 Hydra build #23678 of nixos-config:pr618:nixosConfigurations.not522
Details
Hydra nixosConfigurations.pc-installer Hydra build #23680 of nixos-config:pr618:nixosConfigurations.pc-installer
Details
Hydra checks.x86_64-linux.containers-default Hydra build #23674 of nixos-config:pr618:checks.x86_64-linux.containers-default
Details

Browse source
This commit is contained in:
Charlotte 🦝 Delenk 2024-11-05 09:58:31 +01:00
parent 88ca665407
commit 80bfb16be6
4 changed files with 48 additions and 22 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
.sops.yaml
View file

@ -1,6 +1,7 @@
keys: keys:
- &lotte age1tltjgexkp5fz3rum4j0k66ty5q4u8ptvkgkepumd20zal24g2qfs5xgw76 - &lotte age1tltjgexkp5fz3rum4j0k66ty5q4u8ptvkgkepumd20zal24g2qfs5xgw76
- &not522 age1emv3kzvwgl36hgllrv7rlekqy3y3c6eztadl3lv09ks3z9vv6vdqw06yqa - &not522 age1emv3kzvwgl36hgllrv7rlekqy3y3c6eztadl3lv09ks3z9vv6vdqw06yqa
- &pc-installer age1eh2vd6cdy23qazwg0hzq95pn9e6p8yaqu4g6zyan8gzal4x5ed5qful8kg
creation_rules: creation_rules:
- path_regex: machine/not522/secrets\.yaml$ - path_regex: machine/not522/secrets\.yaml$
@ -18,3 +19,10 @@ creation_rules:
- age: - age:
- *not522 - *not522
- *lotte - *lotte
- *pc-installer
- path_regex: users/darkkirb/password\.yaml$
key_groups:
- age:
- *not522
- *lotte
- *pc-installer

4
machine/pc-installer/disko.nix
View file

@ -3,7 +3,7 @@
disk = { disk = {
main = { main = {
type = "disk"; type = "disk";
device = "/dev/sda"; device = "/dev/disk/by-id/ata-WDC_WD10SPZX-22Z10T0_WD-WXL1A87JL6DC";
content = { content = {
type = "gpt"; type = "gpt";
partitions = { partitions = {
@ -22,7 +22,7 @@
}; };
}; };
root = { root = {
end = "100%"; size = "100%";
content = { content = {
type = "btrfs"; type = "btrfs";
extraArgs = ["-f"]; # Override existing partition extraArgs = ["-f"]; # Override existing partition

29
users/darkkirb/password.yaml
View file

@ -11,20 +11,29 @@ sops:
- recipient: age1emv3kzvwgl36hgllrv7rlekqy3y3c6eztadl3lv09ks3z9vv6vdqw06yqa - recipient: age1emv3kzvwgl36hgllrv7rlekqy3y3c6eztadl3lv09ks3z9vv6vdqw06yqa
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxZGNFN09lSXhxODNjUmNu YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCTGxqVEliMlJZTTBSSFRH
U1R5NVM3RFUycWxSQ3JtMDlTUEZuTUQ3NVI0ClorNm1FbnZhMkJOQnRZcE1UWU15 bkpEVnVWNHNibUJ6QlNTL29DRkx2U05RY1VZCktYL1IreWc2ejI3c3ZBVVNKWjRu
YVREczVsbE9tcFYrWFlySnorbitPb1kKLS0tIGE5NFFlVFJmUDZBRlVJdkNlVzJH TUpJU0llSEduTHR1MHZuM0tFNnV3bkEKLS0tIG12ZTJkdy9BTTNiV0Zwc05ERllQ
VU9hREUxdEVKRkNjTGhucmI2SzNpQlkKjnbgQRvX9PAUztcfDnOikU2tVYO6TAru MjliSXArdVlGN3RzOTRzdmhRVkg1MjAKJWBE/otRlr0vFbzXsYNbF3GysRdTAQ1e
pLYj+nZiCAzdrSDsL17XOtasuMV77DGSFOXFCLqM4RIzJXnBWtMVWw== 57e9FUrteqGEkCzz5Ah9InR33qjPD4+uga0QgZhpiljlQ7E/v/0lpg==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1tltjgexkp5fz3rum4j0k66ty5q4u8ptvkgkepumd20zal24g2qfs5xgw76 - recipient: age1tltjgexkp5fz3rum4j0k66ty5q4u8ptvkgkepumd20zal24g2qfs5xgw76
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzOXdOejhwVkc3cFF1bm9F YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0RkxxbmE5b2JldDBCdGlO
Wmh5Y3RzU3ZrUDBreUFYaDE1dlI3K3orS1dZCnZMR3ZSdWpab0NrUEtjTjl4aUlw TWF1RFUvdEtJRk5oc2JKUnhJNkZkaUp6RTFJCnNhd2VYYWNVcFY2bTYzdm9qZ0Jz
S2ZGQm1ZRExkcmVtbXF0T3VVb2NmNGcKLS0tIFQrbnVWdHViV0Y0UGUyeXhwV1Z3 aFVPUktoQ0pORk1XQ0FzdC8ydGRQUEEKLS0tIGNOR3ZoRVpzbjd5UHF0b3BvSDlN
VFVDamhueUszendibXV1T081MDQ4OFUKFImWYe239QD8SRHNGevPh8iOZZPlpblL cUgzSUhSYUlWRk8xWDlsQjE4TUFIUDQKY5qknwwdCMFWIXHLWUQqvmKF6EKSaDYu
HfU3uw7nPcRyttmrel0glJOzdL+FTBTp1oOGSBcIYDdb6z3/Sr21VA== wbW0GePvR2DvmlxeVP4puKMM68drf3YFOHsg183Ts9xFxRtjQVrSLQ==
-----END AGE ENCRYPTED FILE-----
- recipient: age1eh2vd6cdy23qazwg0hzq95pn9e6p8yaqu4g6zyan8gzal4x5ed5qful8kg
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5UGNPbEFTcFBQRnJkZ2tk
Z0VLNHhrV3V1YWQ4YlRjd29GcUxtVW1Xc2xvCmJEUjhlS0tvVFFjaGFZMDdNSFZ0
bGI0bnYwdFRvR2l0ODlzRlJMWW5PTHcKLS0tIFBSRkQwanI2NWtVN25GS09KYmJV
Vjd0QkU2VnhQcFJ2VTlNeTdRTmhmUU0KCM3KWpVDIjXS1nIuVwofFFudqiIgQ/DM
rBgk0yrx401kz248eazRjXrf5QIpYG+2OJ/WlE7/SiQ9IOluoAAk7w==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-11-05T08:08:48Z" lastmodified: "2024-11-05T08:08:48Z"
mac: ENC[AES256_GCM,data:ZBP0CQTG8Wojh368lX9jNziuOIe9M/1MUjDvH30G96w+mCMa3fp4nmXOPV8DbsATgphJ5To+pZjk+heX72aaTx47jF03vGq2jAMp2gndG4N6R9Zb+UcoHVnyE+Q24PtvRmqcBkQS/Hz1vFUPlpEwKLw8h6ct0DDqalrZ18Ra5HQ=,iv:yIznbjO4o/M+tNcUeSsjHJrky6k+1xVbMwA6/Pngq1I=,tag:p60YYm2QJ+NBhQ/DOhJZzQ==,type:str] mac: ENC[AES256_GCM,data:ZBP0CQTG8Wojh368lX9jNziuOIe9M/1MUjDvH30G96w+mCMa3fp4nmXOPV8DbsATgphJ5To+pZjk+heX72aaTx47jF03vGq2jAMp2gndG4N6R9Zb+UcoHVnyE+Q24PtvRmqcBkQS/Hz1vFUPlpEwKLw8h6ct0DDqalrZ18Ra5HQ=,iv:yIznbjO4o/M+tNcUeSsjHJrky6k+1xVbMwA6/Pngq1I=,tag:p60YYm2QJ+NBhQ/DOhJZzQ==,type:str]

29
users/root/password.yaml
View file

@ -11,20 +11,29 @@ sops:
- recipient: age1emv3kzvwgl36hgllrv7rlekqy3y3c6eztadl3lv09ks3z9vv6vdqw06yqa - recipient: age1emv3kzvwgl36hgllrv7rlekqy3y3c6eztadl3lv09ks3z9vv6vdqw06yqa
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxZGNFN09lSXhxODNjUmNu YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBNjVDbW9xeUwyQ1MrVVpE
U1R5NVM3RFUycWxSQ3JtMDlTUEZuTUQ3NVI0ClorNm1FbnZhMkJOQnRZcE1UWU15 Z1VHVmxreldMZEoyUVEyS2dnVVhzUmd3MmxZCkNvaW02YWhXZGs0cEVTSDlVb1Aw
YVREczVsbE9tcFYrWFlySnorbitPb1kKLS0tIGE5NFFlVFJmUDZBRlVJdkNlVzJH K0lrc1ZxQ0hibEdqMGw0V3hObnBWTVkKLS0tIE43Vi9CWC92T0JvT1I1VjFtMkx5
VU9hREUxdEVKRkNjTGhucmI2SzNpQlkKjnbgQRvX9PAUztcfDnOikU2tVYO6TAru Wno3aFZUQ21UY09Kd1p3dHBHcXZLUVkKPz5xGzW6hfkCODGSisvjBvFkPnO6A5r4
pLYj+nZiCAzdrSDsL17XOtasuMV77DGSFOXFCLqM4RIzJXnBWtMVWw== RSPmTW05t0Lv/4hN+Og4yQsebYpyoPAQzKiIwkIYDTBEndnElOnNRw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1tltjgexkp5fz3rum4j0k66ty5q4u8ptvkgkepumd20zal24g2qfs5xgw76 - recipient: age1tltjgexkp5fz3rum4j0k66ty5q4u8ptvkgkepumd20zal24g2qfs5xgw76
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzOXdOejhwVkc3cFF1bm9F YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYV1JDZEV2RWtTMnVyRjhZ
Wmh5Y3RzU3ZrUDBreUFYaDE1dlI3K3orS1dZCnZMR3ZSdWpab0NrUEtjTjl4aUlw dEZjL2wrR1Jva1FKalpSVHJidVhYQktTaVFFCi9qOWtvb1FDcjRHUGkwMnB2a1g0
S2ZGQm1ZRExkcmVtbXF0T3VVb2NmNGcKLS0tIFQrbnVWdHViV0Y0UGUyeXhwV1Z3 bFFDZTdjRDRXeUxmUVdHNFc0bHVnajAKLS0tIFY5d3IrTXkrNDRIV0ZUalQ4bGg2
VFVDamhueUszendibXV1T081MDQ4OFUKFImWYe239QD8SRHNGevPh8iOZZPlpblL cGNPTXhpTGxvQ1VOVzF3K0NFNkEyY1kK6AIEqiRrQrNHMQDW3gp1DceLN3an+YTZ
HfU3uw7nPcRyttmrel0glJOzdL+FTBTp1oOGSBcIYDdb6z3/Sr21VA== czoo3uH9O6aD62DTXrXtmXUwOzJBQGIB+MriKzFC9PNxR/+MLjYUQA==
-----END AGE ENCRYPTED FILE-----
- recipient: age1eh2vd6cdy23qazwg0hzq95pn9e6p8yaqu4g6zyan8gzal4x5ed5qful8kg
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAySUQyMVl1bTlwNldMWENh
OEpJSWgzN1MvM1E3OWFlSWZLc3NTNEIxVVNzCm5WZzZQa2NhSkFKcHQ1RXRpVUtH
WVY4bzlQRnhQTGRJa1NEeWNHM1VqWTAKLS0tIDQ5UDNuM0g3RWsvVldUUWdxVk5U
MGg3ZUxqcnhzbiszb2RNVkkwNUNIbHcK/NdUErDE9xecelLx1i0MjZCKkdev+hdx
ZWwQORih0fGotN9FjFQuBTc4Y0ApRy8Su52xCp1UOqM0FhnaHjwEQQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-10-29T13:48:11Z" lastmodified: "2024-10-29T13:48:11Z"
mac: ENC[AES256_GCM,data:fNxQFhopRt4cf8tepyYuePCwIwOozf1gOgO3ixhyuZqpnWAt5ng7p8BoKyeigRDvIanBsbUQ8MtuEfIfBSEYzgAeAihODIyuSmsq72sqE1Jfm77Yq8HpeUQxYGEtDND3awx/wEcgpumnNXS9UzAJVh0Un5yY1mUA/E2fYpdVRX0=,iv:Kh9oUpyK83xxfG8OVs2jgxlJDIRiyKuQVgPNEiFdT7A=,tag:CXyRtYHHgD0+INnyEcC6rg==,type:str] mac: ENC[AES256_GCM,data:fNxQFhopRt4cf8tepyYuePCwIwOozf1gOgO3ixhyuZqpnWAt5ng7p8BoKyeigRDvIanBsbUQ8MtuEfIfBSEYzgAeAihODIyuSmsq72sqE1Jfm77Yq8HpeUQxYGEtDND3awx/wEcgpumnNXS9UzAJVh0Un5yY1mUA/E2fYpdVRX0=,iv:Kh9oUpyK83xxfG8OVs2jgxlJDIRiyKuQVgPNEiFdT7A=,tag:CXyRtYHHgD0+INnyEcC6rg==,type:str]