RoyDumblauskas/homelab-config
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

update secret file, add secret test to config.nix

Browse Source
This commit is contained in:
RoyDumblauskas
2025-04-17 10:56:14 -05:00
parent 373437b909
commit 872bcfb683
2 changed files with 9 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nixos/configuration.nix
+5 -1
View File
@@ -13,11 +13,15 @@
defaultSopsFile = ./secrets/build.json; defaultSopsFile = ./secrets/build.json;
defaultSopsFormat = "json"; defaultSopsFormat = "json";
secrets."nixos-homelab-00" = { }; secrets."clusterPassword" = { };
}; };
systemd.user.services.mbsync.unitConfig.After = [ "sops-nix.service" ]; systemd.user.services.mbsync.unitConfig.After = [ "sops-nix.service" ];
environment.variable = {
SECRETKEY = "${config.sops.secrets."clusterPassword".path}";
};
# Grub Boot Loader Setup # Grub Boot Loader Setup
boot.loader.grub = { boot.loader.grub = {
enable = true; enable = true;
nixos/secrets/build.json
+3 -6
View File
@@ -1,8 +1,5 @@
{ {
"nixos-homelab-00": "ENC[AES256_GCM,data:n2EGHj/PZz6MjERUjA==,iv:AWuggQHU5uQGl7nB43QC7W15q+hBmqBCx78Fr4ZWfeQ=,tag:qoOSd7/gt9EEZjZXtDQ8KQ==,type:str]", "clusterPassword": "ENC[AES256_GCM,data:bI7KikJaKwokrfDHmu2iz9Qn,iv:jKQ9TrTfanLAlW/D3LiPCN0AKCPtHWknW4hXlJSMsc4=,tag:wqdUp1wfl/2keimxsd2sgQ==,type:str]",
"k8s": {
"clusterPass": "ENC[AES256_GCM,data:n2pfdUswKi6SGtPkpTg=,iv:dXeTDGUmgXKZJ7zJonzgz66C1r/T69UsckEu8q9SI7k=,tag:oY+Hkzy7IG/TbdGv5BDpkw==,type:str]"
},
"sops": { "sops": {
"kms": null, "kms": null,
"gcp_kms": null, "gcp_kms": null,
@@ -14,8 +11,8 @@
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGZUs1ajViZTM4Smg3a1BU\nU05taWxTUGRzald0cnE3MWt1VzVtMGE0cHlvCnhWbVN0cFNSZDZMcVdXUXVtZUtM\nRzhmK1QvS1R6enNKRnRUdlRLdWhQZjQKLS0tIGJRWElaTWhCbm50Wk1ZRjBUbU5R\nZU9tUjhlR0xwQlU0WnNvQ1FBZGlRQWcK/+Vj6QoktFQ78CxJ8dSQGGqE72fxagA+\n10f60BNlWjWtkIZ2CmcjsDi1zLHny10MaKj9fyRvmBta6Inzra/maA==\n-----END AGE ENCRYPTED FILE-----\n" "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGZUs1ajViZTM4Smg3a1BU\nU05taWxTUGRzald0cnE3MWt1VzVtMGE0cHlvCnhWbVN0cFNSZDZMcVdXUXVtZUtM\nRzhmK1QvS1R6enNKRnRUdlRLdWhQZjQKLS0tIGJRWElaTWhCbm50Wk1ZRjBUbU5R\nZU9tUjhlR0xwQlU0WnNvQ1FBZGlRQWcK/+Vj6QoktFQ78CxJ8dSQGGqE72fxagA+\n10f60BNlWjWtkIZ2CmcjsDi1zLHny10MaKj9fyRvmBta6Inzra/maA==\n-----END AGE ENCRYPTED FILE-----\n"
} }
], ],
"lastmodified": "2025-04-16T05:48:06Z", "lastmodified": "2025-04-17T15:26:55Z",
"mac": "ENC[AES256_GCM,data:3WsNWzpFURYfOW1+Nel2cxq//SsYLOk7UWYlVldysGyiyf+hmwxwhOFRVEWEDD50k732wPO0OTXGGMf5Jp3ZpzwxWg1oROu7nmbVKzAxniqY5X4txzbyJeeVZGaitBwV2R7EBhvFGFgGsTfcY1f8vXxX7j6IX9xIwBCO48sHH4g=,iv:caoaGuVRx5351Ed7o37yYD7UZIo6yi98VV+2hq0ABSs=,tag:B6ZzpWGwG0Dg6TWEthQvCg==,type:str]", "mac": "ENC[AES256_GCM,data:iR0+jYD3SMDYtpaSHJpvxme+ASRdhDcgcLNBS6bT/9u/Da35rUonQ/zOeSIKXvgWIOxjdvJalFqpBwoZfAnbg7hzcUiPAWfGuiTkqv5bLy/UJgKAf1G/bWthsdOc4iSuh1ogQ+heYBOJld+ZX3m5gU73PuilaWRG/H0kCuOuffc=,iv:ExcsQluMZFPxyeB9NnqNv9bENuwAK62ndXcUAdcehaM=,tag:i+N4UpZ1ls/mGRQhV3myiw==,type:str]",
"pgp": null, "pgp": null,
"unencrypted_suffix": "_unencrypted", "unencrypted_suffix": "_unencrypted",
"version": "3.9.4" "version": "3.9.4"