vno1-op5p: start with secrets

need to recode
This commit is contained in:
Motiejus Jakštys 2024-03-08 17:20:04 +00:00
parent 1038e5ea81
commit 4c04b8eacf
3 changed files with 13 additions and 10 deletions

View File

@ -63,6 +63,9 @@ rec {
publicIP = "88.223.107.21";
jakstIP = "100.89.176.4";
};
"vno1-op5p.servers.jakst" = rec {
publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGy9/qixhcPLeVNJIvN7n32bk8gnq3wqwYFM4SWqgdLb root@op5p";
};
"vno3-rp3b.servers.jakst" = rec {
extraHostNames = [jakstIP];
publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBudUFFEBpUVdr26vLJup8Hk6wj1iDbOPPQnJbv6GUGC";

View File

@ -156,15 +156,14 @@
./hosts/vno1-op5p/configuration.nix
home-manager.nixosModules.home-manager
#agenix.nixosModules.default
#{
# age.secrets = {
# motiejus-passwd-hash.file = ./secrets/motiejus_passwd_hash.age;
# root-passwd-hash.file = ./secrets/root_passwd_hash.age;
# sasl-passwd.file = ./secrets/postfix_sasl_passwd.age;
# };
#}
agenix.nixosModules.default
{
age.secrets = {
motiejus-passwd-hash.file = ./secrets/motiejus_passwd_hash.age;
root-passwd-hash.file = ./secrets/root_passwd_hash.age;
sasl-passwd.file = ./secrets/postfix_sasl_passwd.age;
};
}
];
specialArgs = {inherit myData;} // inputs;

View File

@ -9,8 +9,9 @@ let
fwminex = (import ./data.nix).hosts."fwminex.motiejus.jakst".publicKey;
fra1-a = (import ./data.nix).hosts."fra1-a.servers.jakst".publicKey;
vno1-oh2 = (import ./data.nix).hosts."vno1-oh2.servers.jakst".publicKey;
vno1-op5p = (import ./data.nix).hosts."vno1-op5p.servers.jakst".publicKey;
vno3-rp3b = (import ./data.nix).hosts."vno3-rp3b.servers.jakst".publicKey;
systems = [fra1-a vno1-oh2 vno3-rp3b fwminex];
systems = [fra1-a vno1-oh2 vno1-op5p vno3-rp3b fwminex];
mk = auth: keyNames:
builtins.listToAttrs (