diff --git a/virtual-machines/.sops.yaml b/virtual-machines/.sops.yaml index b145543..01a9045 100644 --- a/virtual-machines/.sops.yaml +++ b/virtual-machines/.sops.yaml @@ -2,7 +2,7 @@ keys: hosts: - &laptop age1zad0qu648dhjav4pzjhkc6vswnqtacuv9230xcgle8wmv56r8ykqn0ud7y - &desktop age1rwugh86469664fwhgrj9xuhjxs9vpflx3r0ftuvd0glphf2gecfs8thxsj - - &nixos-homelab-00 age16ht8xkm70pmhl28m6g5fr3gl7xtsec37y57wauee6jqu06678ctqfw87ml + - &nixos-homelab-00 age1h0rmmv9lwql34a73e07e9ms6et4np8puqpmrpk6yh75h4q994ydqqs7fs4 - &nixos-homelab-00-user age1hzaf8j6djfc4yc98m3kqjzzdj4tcskf9kdzvjmje2xuqcfmrz5lqdtn5w7 creation_rules: - path_regex: '.*/secrets/[^/]+\.(yaml|json|env|ini)$' diff --git a/virtual-machines/vm-test/flake.nix b/virtual-machines/vm-test/flake.nix index 9a4291f..c488efe 100644 --- a/virtual-machines/vm-test/flake.nix +++ b/virtual-machines/vm-test/flake.nix @@ -17,29 +17,25 @@ }@inputs: let system = "x86_64-linux"; - /* - pkgs = import nixpkgs { - inherit system; - }; - credentials = builtins.listToAttrs ( - map (filename: { - name = builtins.replaceStrings [ ".env" ] [ "-env" ] filename; - value = pkgs.runCommand "sops-decrypt-${filename}" { } '' - ${pkgs.sops}/bin/sops -d ${./secrets}/${filename} > $out - ''; - }) (builtins.attrNames (builtins.readDir ./secrets)) - ); - */ + pkgs = import nixpkgs { + inherit system; + }; + credentials = builtins.listToAttrs ( + map (filename: { + name = builtins.replaceStrings [ ".env" ] [ "-env" ] filename; + value = pkgs.runCommand "sops-decrypt-${filename}" { } '' + ${pkgs.sops}/bin/sops -d ${./secrets}/${filename} > $out + ''; + }) (builtins.attrNames (builtins.readDir ./secrets)) + ); in { nixosConfigurations = { vm = nixpkgs.lib.nixosSystem { system = system; - /* - specialArgs = { - inherit credentials; - }; - */ + specialArgs = { + inherit credentials; + }; modules = [ ./virtual.nix postgresql-db.nixosModules.postgresql-db