Move secrets to machine config
This commit is contained in:
parent
cabd210aa6
commit
e91f417a29
2 changed files with 8 additions and 7 deletions
|
@ -1,4 +1,4 @@
|
||||||
{
|
{config, ...}: {
|
||||||
imports = [
|
imports = [
|
||||||
./hardware-configuration.nix
|
./hardware-configuration.nix
|
||||||
../../roles
|
../../roles
|
||||||
|
@ -12,4 +12,11 @@
|
||||||
# System configuration here
|
# System configuration here
|
||||||
networking.hostName = "bragi";
|
networking.hostName = "bragi";
|
||||||
system.stateVersion = "23.11";
|
system.stateVersion = "23.11";
|
||||||
|
|
||||||
|
sops.secrets.backupKey = {
|
||||||
|
sopsFile = ./backupKey.yaml;
|
||||||
|
owner = config.users.users.fsaccount.name;
|
||||||
|
inherit (config.users.users.fsaccount) group;
|
||||||
|
mode = "0400";
|
||||||
|
};
|
||||||
}
|
}
|
||||||
|
|
|
@ -161,11 +161,5 @@ in {
|
||||||
}
|
}
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
sops.secrets.backupKey = {
|
|
||||||
sopsFile = ../machines/bragi/backupKey.yaml;
|
|
||||||
owner = config.users.users.fsaccount.name;
|
|
||||||
inherit (config.users.users.fsaccount) group;
|
|
||||||
mode = "0400";
|
|
||||||
};
|
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in a new issue