Koen/nix-config
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Added SOPS and Syncthing to the configuration

Browse source
This commit is contained in:
KoenDR06 2024-06-27 17:22:21 +02:00
parent de0e71b363
commit c931433802
2 changed files with 56 additions and 51 deletions
Download patch file Download diff file Expand all files Collapse all files

92
machines/common/configuration.nix
View file

@ -8,7 +8,6 @@
}: { }: {
imports = [ imports = [
../../pkgs/zsh.nix ../../pkgs/zsh.nix
# inputs.sops-nix.nixosModules.sops
]; ];
nixpkgs = { nixpkgs = {
@ -52,51 +51,58 @@
fallbackDns = [ "1.1.1.1#one.one.one.one" "1.0.0.1#one.one.one.one" ]; fallbackDns = [ "1.1.1.1#one.one.one.one" "1.0.0.1#one.one.one.one" ];
}; };
# sops = { sops = {
# defaultSopsFile = ../../secrets/secrets.yaml; defaultSopsFile = ../../secrets/secrets.yaml;
# defaultSopsFormat = "yaml"; defaultSopsFormat = "yaml";
# age = { age = {
# sshKeyPaths = [ "/etc/ssh/id_ed25519" ]; sshKeyPaths = [ "/home/horseman/.ssh/id_ed25519" ];
# keyFile = "/home/horseman/.config/sops/age/keys.txt"; keyFile = "/home/horseman/.config/sops/age/keys.txt";
# generateKey = true; generateKey = true;
# }; };
#
# secrets = {
# "syncthing/solis".owner = "horseman";
# "syncthing/terra".owner = "horseman";
# "syncthing/luna".owner = "horseman";
# };
# };
# services.syncthing = { secrets = {
# enable = true; "syncthing/solis".owner = "horseman";
# user = "horseman"; "syncthing/terra".owner = "horseman";
# dataDir = "/home/horseman"; "syncthing/luna".owner = "horseman";
# configDir = "/home/horseman/.config/syncthing"; "syncthing/gui_user".owner = "horseman";
# overrideDevices = true; "syncthing/gui_password".owner = "horseman";
# overrideFolders = true;
# settings = { };
# devices = { };
# "luna" = ;
# "terra" = ; # services.syncthing.enable = true;
# "solis" = ;
# }; services.syncthing = {
# folders = { enable = true;
# "Documents" = { user = "horseman";
# path = "/home/horseman/Documents"; dataDir = "/home/horseman";
configDir = "/home/horseman/.config/syncthing";
overrideDevices = true;
overrideFolders = true;
settings = {
devices = {
"luna" = config.sops.secrets."syncthing/luna";
"terra" = config.sops.secrets."syncthing/terra";
# "solis" = config.sops.secrets."syncthing/solis";
};
folders = {
"Documents" = {
path = "/home/horseman/Documents";
# devices = [ "solis" "terra" "luna" ]; # devices = [ "solis" "terra" "luna" ];
# }: devices = [ "terra" "luna" ];
# "Programming" = { };
# path = "/home/horseman/Programming"; "Programming" = {
path = "/home/horseman/Programming";
# devices = [ "solis" "terra" "luna" ]; # devices = [ "solis" "terra" "luna" ];
# }; devices = [ "terra" "luna" ];
# }; };
# gui = { };
# user = ; gui = {
# password = ; user = config.sops.secrets."syncthing/gui_user";
# }; password = config.sops.secrets."syncthing/gui_password";
# }; };
# }; };
};
users.users = { users.users = {
horseman = { horseman = {

15
secrets/secrets.yaml
View file

@ -1,10 +1,9 @@
syncthing: syncthing:
#ENC[AES256_GCM,data:LJUC,iv:MlEcsaCuH7W/cj/JQhYAKJVwyQ+Uqk7I4/WFZeBpr04=,tag:hlEgSpdtXx1Twt+SIIckGg==,type:comment] solis: ENC[AES256_GCM,data:qm3bG1I=,iv:TRWRnSpESraDIC4xPbG59fWR/HEnNomAveQSNCsIbNw=,tag:CQ0WH6KZpKYX8xdZZYDn/w==,type:str]
solis: null terra: ENC[AES256_GCM,data:j6NcCwBfc68vZV0dbIyDcTJ0E4QuDG/XC+A2YA+29HyWtDD+tWubmHKdP479CMrAqL/WpD+wGtdIznIA0uVb,iv:8k4oIE2wiHaMlH4H19QK/wXEMRCnQxk8nK6jz5Q1/Wc=,tag:xZfyFxXWOoBoMF5z0gMRNw==,type:str]
#ENC[AES256_GCM,data:6MOB,iv:7Rmzh5LYM7wD+K6Idi2DLkyKSSm8/rgQtUWf8gPEMzQ=,tag:EmCkhFO7016xszMogrNUpg==,type:comment] luna: ENC[AES256_GCM,data:tGoD,iv:uqlhHBOKM6ts/U3t3VNh05n3FoKZiP4EIAg28IQXHvQ=,tag:NsMrQ8QEhJZZ2WhnGXsWXA==,type:str]
terra: null gui_user: ENC[AES256_GCM,data:Ca9ra2g=,iv:wwtCnERfKxGI3oiW2uEvdmKMAibeyOkpSgFokSjC4U4=,tag:jbiovNbhArFjsQ/Dk+GiZA==,type:str]
#ENC[AES256_GCM,data:1EoT,iv:ytmfI03F4A4qMtk3l7HYGyng/NIWHho+Riq8Fj6vtCE=,tag:U/4qWsZYA+dU4dcJ7lkx5Q==,type:comment] gui_password: ENC[AES256_GCM,data:CZJGYVCtwtHsOIjUatjqrw==,iv:LPszBvCaxUnFKy0K2EJnVVSpXPbAn0TUAwHnwBuqAgg=,tag:lpN6ksE4HbdkdeRbLz/orQ==,type:str]
luna: null
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
@ -20,8 +19,8 @@ sops:
ckJwQ3EzU2JzdGhnWkNnRExRNlprM28KUHkZe8FvLOAt+UVqvgOxBQdApbEXQ44v ckJwQ3EzU2JzdGhnWkNnRExRNlprM28KUHkZe8FvLOAt+UVqvgOxBQdApbEXQ44v
vXW8UtZuq7GjsP5qD2MK6oKs/ZDfe+PhqiWl4ONNHvpn8rmfbQDcRw== vXW8UtZuq7GjsP5qD2MK6oKs/ZDfe+PhqiWl4ONNHvpn8rmfbQDcRw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-05-24T19:11:16Z" lastmodified: "2024-06-25T14:57:53Z"
mac: ENC[AES256_GCM,data:UAz/pCKzV0HPFfus7tKafOLr1DWIBWWBVNDs6C43m+QdWpUHQ99jgK7yyq8YbAglGIfWB3AIlriQkcem9Wx3ExVh1BPKtCzwnfjFBEhzPws428JIzEOIZzrSk6tho2bvjaaOTQOWOERmbJhiL/e1pXdX+pln+kEtLdeq/9TDRK8=,iv:QtJPxvq9mGCu2Df5m+E+2+XD25so1cyDga/mdjBaH5c=,tag:TGllydw+4XGLIqnZ5QDxdg==,type:str] mac: ENC[AES256_GCM,data:DFibspQWjHjnTcMe33eUoekHTmbCx8MTdwbFF3qsQ/1+KVI6HdgGhkA9gJV9P5osG/wR+TI2eOCdQQpGW2VF56BoP2uXrjbdYNVFjBWaIKurrxKKnRPlT1X1PerjTqvLH83HYqwwTjk6ANOa0HH2piC3JG/KJ+TM/RqmzCTV36Q=,iv:NrnL+w2dJucrkqqyxlKLDkR22mTboaNgD/OCUK84AmE=,tag:sRdEzZhs4kta/2f/XV1Ikw==,type:str]
pgp: [] pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.8.1 version: 3.8.1