RoyDumblauskas/homelab-config
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

add root .ssh folder

Browse Source
This commit is contained in:
RoyDumblauskas
2025-06-05 12:34:58 -05:00
parent 5cf33774db
commit 8b28a6ff93
4 changed files with 18 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nixos/.sops.yaml
+2 -1
View File
@@ -1,7 +1,7 @@
keys: keys:
hosts: hosts:
- &laptop age1ldgnl53dmvl4fjz6hgdj0cvensagddn3ltpmxfm72m8q273w75fsk42p8v - &laptop age1ldgnl53dmvl4fjz6hgdj0cvensagddn3ltpmxfm72m8q273w75fsk42p8v
- &nixos-homelab-00 age177wwag0rmyejqm37l748tuup5lvdslaza6kjkrjhdfce2drajscqn6cmru - &nixos-homelab-00 age15w5qelqemnvytp38ywdwmflc6qmrqph3dwqmx3lrec5cm5d9nchq9pfe8s
creation_rules: creation_rules:
- path_regex: secrets/[^/]+\.(yaml|json|env|ini)$ - path_regex: secrets/[^/]+\.(yaml|json|env|ini)$
key_groups: key_groups:
@@ -34,3 +34,4 @@ creation_rules:
- *nixos-homelab-00 - *nixos-homelab-00
- *nixos-homelab-00 - *nixos-homelab-00
- *nixos-homelab-00 - *nixos-homelab-00
- *nixos-homelab-00
nixos/configuration.nix
+10 -4
View File
@@ -154,10 +154,16 @@
# Symlink the user directories that need to be persisted (ssh key/repository folder) # Symlink the user directories that need to be persisted (ssh key/repository folder)
environment.persistence."/persist" = { environment.persistence."/persist" = {
users.sysAdmin.directories = [ users = {
".ssh" sysAdmin.directories = [
"rp" ".ssh"
]; "rp"
];
root.directories = [
".ssh"
];
};
}; };
users.users.root = { users.users.root = {
nixos/secrets/build.json
+3 -3
View File
@@ -4,11 +4,11 @@
"age": [ "age": [
{ {
"recipient": "age1ldgnl53dmvl4fjz6hgdj0cvensagddn3ltpmxfm72m8q273w75fsk42p8v", "recipient": "age1ldgnl53dmvl4fjz6hgdj0cvensagddn3ltpmxfm72m8q273w75fsk42p8v",
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVNkdjMER1TFB5MjRvWUxh\ncVRTRTNtV1ZuNUJjOFhGa2hYK0gwdTdVbEJjCjlDYkhDN1BEMHdjZStES2lyMUlF\nWTJZOTFFQUxYaDdSY0VUd2dFd3pBOHcKLS0tIFQzcm9aSzF6bklUWXJJTjcrRU1K\ndEpLY1RQNXN6YSszbUhzeGJPY3dXZW8KgOb1rFnqibwvtBdC55f2aVDIC3V33b6k\niIboCO/swiD7N3IF3imvaHdG9ILy5oIH9KJOCpl12RrLvhIlU/lp6Q==\n-----END AGE ENCRYPTED FILE-----\n" "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMdHhLOVdFcEhLamc5RlZD\nb2lLUEtQMVJLMjljY2ViVnEwUDRCL2lmQWlNCkpvSmNHaG04Zm4rc1FjcGNLTU9P\nYUZWVEJpdk9iY3BqVWUxZUNVYlB1ZFEKLS0tIDlQTFN1QlBXQmZXSU0wMlVzSEJi\nWDdRNUV3ZHJzSStmdEhra0lPUW1OQzAKCOgP8Z0rCCcJtlKIVmrSR9h4Kwfb7Vpw\n9h4px8mJ16Y7/+K8edgCkex6JxN6aQaqPby+UV0U6YrPGyno4qgWDg==\n-----END AGE ENCRYPTED FILE-----\n"
}, },
{ {
"recipient": "age177wwag0rmyejqm37l748tuup5lvdslaza6kjkrjhdfce2drajscqn6cmru", "recipient": "age15w5qelqemnvytp38ywdwmflc6qmrqph3dwqmx3lrec5cm5d9nchq9pfe8s",
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2ekYzQWZtM25IUTl2OU5i\nS3lkdFpLNUluZGxZNlpja3FlYUpzTmlRUDE0CkVneURXcGE5Zm5pbHlHeXMzZGJD\nODdXU25XTk5oWW0zQnhhdlZqc2pKNE0KLS0tIFNmOWdza3FYWUl0VTZlemFHUTd2\nRXRtOEpIZGwzOTBUSURWQVEwcHZXd2sKhqH+YCXCH/mplhUYxGOWz6S3ha+AJWqR\nEtdnr2XK6V8a1OmdMBtoYdym72S7W30TksoW6I+bYNP9lW74GgbuFw==\n-----END AGE ENCRYPTED FILE-----\n" "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvNkprc0RlYVlkbUlqKzgr\nNEdNU01OWlFlNkVuekhJakZrMkdxSUhvcUZnCjlZVXBZS0lTVU52Y3ozSEhsRk9C\ndTZzeDkveFRyYUZNS1ZPbjJZZ01PZTgKLS0tICswNmlBQVJnejVub1NsMy95dnlN\neXQySDY1OVo0d01oMG9RYXBBMGlxZGMKwkVhiXzprx8l8EHbsCLsiPwahLmhdJSd\nVCCzuVE6zrm6MuKsUGo7+IkG/ESNiQ7X2ijO0ODEpfVNyvqMIRjvWw==\n-----END AGE ENCRYPTED FILE-----\n"
} }
], ],
"lastmodified": "2025-04-17T15:26:55Z", "lastmodified": "2025-04-17T15:26:55Z",
nixos/secrets/cloudflare.json
+3 -3
View File
@@ -5,11 +5,11 @@
"age": [ "age": [
{ {
"recipient": "age1ldgnl53dmvl4fjz6hgdj0cvensagddn3ltpmxfm72m8q273w75fsk42p8v", "recipient": "age1ldgnl53dmvl4fjz6hgdj0cvensagddn3ltpmxfm72m8q273w75fsk42p8v",
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqdk03R0xaZ090aER1Wldt\nRGVGMFFMZG90TVovVjJoWm9ONU1VaDdQS0ZnCitKcUhkV0VzODVKUkNxNU1rVXJk\nK1BwV1piVlo0Q0lTbUVTUlhDUGVZK28KLS0tIGRYeVUza2JRNE0vZzZsMTg4akJo\nMlBSNVNUZTBObDB3N0pTYXhtQWgydG8KTQs4V0VjUFWl6pUk4Po/03dxE+ANpXJb\nd8k1n39aqNa7WQdoEe6zUQlPhaGHUszj8bIbdv46GiVADCJGJXs+Wg==\n-----END AGE ENCRYPTED FILE-----\n" "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxYWVLTVZOS0VESVRlQWVX\ncmpoNHVCV0RRa1FRb21KUmJ1ZHcvc2xmQ0FVCloya0N1UWpSdGdJdVN4a25zNG9K\nQWl2b2lzQWtOa3lqUDJHeWg0ekcxbjAKLS0tIGdBL1NiUGs1WGIrL2FLSCs2WWgv\ndkhqbGlMdzVFQi8vMTl3amorNFpGdjQKvroY87/GXspFnlJ8+GGb5OYJNdCfTvVd\nxO+biYofS2/GqV3VGyqKBBNNFzhoGdf/3Ax510dcDYh/zavt0PqV3Q==\n-----END AGE ENCRYPTED FILE-----\n"
}, },
{ {
"recipient": "age177wwag0rmyejqm37l748tuup5lvdslaza6kjkrjhdfce2drajscqn6cmru", "recipient": "age15w5qelqemnvytp38ywdwmflc6qmrqph3dwqmx3lrec5cm5d9nchq9pfe8s",
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxb1ova3FYUE1wVnU0anJN\nQ28rRzNpbFlJTW05c0xUeWMzZlFNUlRsblZvCktmMzRGU3dQSnhwbVY1NFBWVGpG\ndEJ0ODhFcXRzKzdSRGo4ZDRMeGtkQUUKLS0tIFNBSVJZbkR0ampWN3pDVERDanFD\nZndXUGYyM01UcHFzV0xzZm5rUnpHYU0Kfc7Fh6q7xV4OyjB3F+fjjt9XWizm/fnz\n4fCkO9t0ZUcb7YoBwpHdZ3Ex7Xkey8URF2Tcv0/gWF0XyaJ0rOQvxA==\n-----END AGE ENCRYPTED FILE-----\n" "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyKzN2UHhwV0RtZzBFc2J1\nV3FYVFNNQ0JwdFkxenZXSllaVXZLZHFDT2lNCnpRRGNwQTZGT1pBN1VRQ0NPYVJk\nMzdXSzJ3U3NtWlU5VTNkVm5wV3pLSnMKLS0tIC9tZ3Q2N3RPd2ovcEg1VFhENVNo\ndEZwSXhwRnFuYTFBbDJyMEx5Q0REU1kKRRREzYsOjysG4fiIdxBCo69iNujrUEpc\nxNnTj1dSlGvwQrVDEoeHm1WYH0Pi36G2L+qGCrQviOsPk/kUR8wJUw==\n-----END AGE ENCRYPTED FILE-----\n"
} }
], ],
"lastmodified": "2025-04-28T04:15:19Z", "lastmodified": "2025-04-28T04:15:19Z",