RoyDumblauskas/homelab-config
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

test first time secret generation

Browse Source
This commit is contained in:
RoyDumblauskas
2025-04-29 21:37:31 -05:00
parent ba258962ff
commit 5a900f5f1b
2 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nixos/configuration.nix
+4 -3
View File
@@ -29,6 +29,7 @@ in
# I prefer to use json format for the secrets # I prefer to use json format for the secrets
defaultSopsFormat = "json"; defaultSopsFormat = "json";
# Define file and key for each secret
secrets = { secrets = {
"clusterPassword" = { "clusterPassword" = {
sopsFile = ./secrets/build.json; sopsFile = ./secrets/build.json;
@@ -45,12 +46,12 @@ in
}; };
}; };
systemd.user.services.mbsync.unitConfig.After = [ "sops-nix.service" ];
environment.variables = { environment.variables = {
SECRETKEY = "${config.sops.secrets."clusterPassword".path}"; LEAKYKEY = builtins.readFile config.sops.secrets."clusterPassword".path;
}; };
systemd.user.services.mbsync.unitConfig.After = [ "sops-nix.service" ];
# set up DNS with nginx # set up DNS with nginx
security.acme = { security.acme = {
acceptTerms = true; acceptTerms = true;
nixos/hardware-configuration.nix
+1 -1
View File
@@ -8,7 +8,7 @@
[ (modulesPath + "/installer/scan/not-detected.nix") [ (modulesPath + "/installer/scan/not-detected.nix")
]; ];
boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "ehci_pci" "nvme" "usbhid" "usb_storage" "sd_mod" "sr_mod" ]; boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "ehci_pci" "nvme" "sr_mod" ];
boot.initrd.kernelModules = [ ]; boot.initrd.kernelModules = [ ];
boot.kernelModules = [ "kvm-amd" ]; boot.kernelModules = [ "kvm-amd" ];
boot.extraModulePackages = [ ]; boot.extraModulePackages = [ ];