update secret file, add secret test to config.nix

This commit is contained in:
2025-04-17 10:56:14 -05:00
parent 373437b909
commit 872bcfb683
2 changed files with 9 additions and 8 deletions
+5 -1
View File
@@ -13,11 +13,15 @@
defaultSopsFile = ./secrets/build.json;
defaultSopsFormat = "json";
secrets."nixos-homelab-00" = { };
secrets."clusterPassword" = { };
};
systemd.user.services.mbsync.unitConfig.After = [ "sops-nix.service" ];
environment.variable = {
SECRETKEY = "${config.sops.secrets."clusterPassword".path}";
};
# Grub Boot Loader Setup
boot.loader.grub = {
enable = true;
+3 -6
View File
@@ -1,8 +1,5 @@
{
"nixos-homelab-00": "ENC[AES256_GCM,data:n2EGHj/PZz6MjERUjA==,iv:AWuggQHU5uQGl7nB43QC7W15q+hBmqBCx78Fr4ZWfeQ=,tag:qoOSd7/gt9EEZjZXtDQ8KQ==,type:str]",
"k8s": {
"clusterPass": "ENC[AES256_GCM,data:n2pfdUswKi6SGtPkpTg=,iv:dXeTDGUmgXKZJ7zJonzgz66C1r/T69UsckEu8q9SI7k=,tag:oY+Hkzy7IG/TbdGv5BDpkw==,type:str]"
},
"clusterPassword": "ENC[AES256_GCM,data:bI7KikJaKwokrfDHmu2iz9Qn,iv:jKQ9TrTfanLAlW/D3LiPCN0AKCPtHWknW4hXlJSMsc4=,tag:wqdUp1wfl/2keimxsd2sgQ==,type:str]",
"sops": {
"kms": null,
"gcp_kms": null,
@@ -14,8 +11,8 @@
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGZUs1ajViZTM4Smg3a1BU\nU05taWxTUGRzald0cnE3MWt1VzVtMGE0cHlvCnhWbVN0cFNSZDZMcVdXUXVtZUtM\nRzhmK1QvS1R6enNKRnRUdlRLdWhQZjQKLS0tIGJRWElaTWhCbm50Wk1ZRjBUbU5R\nZU9tUjhlR0xwQlU0WnNvQ1FBZGlRQWcK/+Vj6QoktFQ78CxJ8dSQGGqE72fxagA+\n10f60BNlWjWtkIZ2CmcjsDi1zLHny10MaKj9fyRvmBta6Inzra/maA==\n-----END AGE ENCRYPTED FILE-----\n"
}
],
"lastmodified": "2025-04-16T05:48:06Z",
"mac": "ENC[AES256_GCM,data:3WsNWzpFURYfOW1+Nel2cxq//SsYLOk7UWYlVldysGyiyf+hmwxwhOFRVEWEDD50k732wPO0OTXGGMf5Jp3ZpzwxWg1oROu7nmbVKzAxniqY5X4txzbyJeeVZGaitBwV2R7EBhvFGFgGsTfcY1f8vXxX7j6IX9xIwBCO48sHH4g=,iv:caoaGuVRx5351Ed7o37yYD7UZIo6yi98VV+2hq0ABSs=,tag:B6ZzpWGwG0Dg6TWEthQvCg==,type:str]",
"lastmodified": "2025-04-17T15:26:55Z",
"mac": "ENC[AES256_GCM,data:iR0+jYD3SMDYtpaSHJpvxme+ASRdhDcgcLNBS6bT/9u/Da35rUonQ/zOeSIKXvgWIOxjdvJalFqpBwoZfAnbg7hzcUiPAWfGuiTkqv5bLy/UJgKAf1G/bWthsdOc4iSuh1ogQ+heYBOJld+ZX3m5gU73PuilaWRG/H0kCuOuffc=,iv:ExcsQluMZFPxyeB9NnqNv9bENuwAK62ndXcUAdcehaM=,tag:i+N4UpZ1ls/mGRQhV3myiw==,type:str]",
"pgp": null,
"unencrypted_suffix": "_unencrypted",
"version": "3.9.4"