Koen/nix-config
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

ssh key reroll

Browse source
This commit is contained in:
KoenDR06 2025-09-30 23:24:10 +02:00
parent aec7763929
commit fb781d6e8a
10 changed files with 191 additions and 42 deletions
Download patch file Download diff file Expand all files Collapse all files

32
modules/base/secrets.nix
View file

@ -1,12 +1,13 @@
{
lib,
config,
inputs,
pkgs,
...
}: let
inherit (lib) mkEnableOption mkIf;
cfg = config.horseman.base.secrets;
secretFile = path: ../../secrets/${path};
username = config.horseman.username;
in {
options = {
horseman.base.secrets = {
@ -15,12 +16,35 @@ in {
};
config = mkIf cfg.enable {
environment.systemPackages = [
inputs.agenix.packages.x86_64-linux.default
];
environment.systemPackages = [pkgs.ragenix];
age.secrets = {
wifi.file = secretFile "wifi.age";
personalSSHpub = {
file = secretFile "id_personal.pub.age";
owner = username;
group = "users";
path = "/home/horseman/.ssh/id_personal.pub";
};
personalSSH = {
file = secretFile "id_personal.age";
owner = username;
group = "users";
path = "/home/horseman/.ssh/id_personal";
};
githubSSHpub = {
file = secretFile "id_github.pub.age";
owner = username;
group = "users";
path = "/home/horseman/.ssh/id_github.pub";
};
githubSSH = {
file = secretFile "id_github.age";
owner = username;
group = "users";
path = "/home/horseman/.ssh/id_github";
};
};
};
}