From 4c04b8eacf065f54078154236c2ae3a4563afbf3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Motiejus=20Jak=C5=A1tys?= Date: Fri, 8 Mar 2024 17:20:04 +0000 Subject: [PATCH] vno1-op5p: start with secrets need to recode --- data.nix | 3 +++ flake.nix | 17 ++++++++--------- secrets.nix | 3 ++- 3 files changed, 13 insertions(+), 10 deletions(-) diff --git a/data.nix b/data.nix index 1c3f843..6fea4fc 100644 --- a/data.nix +++ b/data.nix @@ -63,6 +63,9 @@ rec { publicIP = "88.223.107.21"; jakstIP = "100.89.176.4"; }; + "vno1-op5p.servers.jakst" = rec { + publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGy9/qixhcPLeVNJIvN7n32bk8gnq3wqwYFM4SWqgdLb root@op5p"; + }; "vno3-rp3b.servers.jakst" = rec { extraHostNames = [jakstIP]; publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBudUFFEBpUVdr26vLJup8Hk6wj1iDbOPPQnJbv6GUGC"; diff --git a/flake.nix b/flake.nix index b0859e7..866c6d8 100644 --- a/flake.nix +++ b/flake.nix @@ -156,15 +156,14 @@ ./hosts/vno1-op5p/configuration.nix home-manager.nixosModules.home-manager - #agenix.nixosModules.default - #{ - # age.secrets = { - # motiejus-passwd-hash.file = ./secrets/motiejus_passwd_hash.age; - # root-passwd-hash.file = ./secrets/root_passwd_hash.age; - - # sasl-passwd.file = ./secrets/postfix_sasl_passwd.age; - # }; - #} + agenix.nixosModules.default + { + age.secrets = { + motiejus-passwd-hash.file = ./secrets/motiejus_passwd_hash.age; + root-passwd-hash.file = ./secrets/root_passwd_hash.age; + sasl-passwd.file = ./secrets/postfix_sasl_passwd.age; + }; + } ]; specialArgs = {inherit myData;} // inputs; diff --git a/secrets.nix b/secrets.nix index 7672c09..d519c9f 100644 --- a/secrets.nix +++ b/secrets.nix @@ -9,8 +9,9 @@ let fwminex = (import ./data.nix).hosts."fwminex.motiejus.jakst".publicKey; fra1-a = (import ./data.nix).hosts."fra1-a.servers.jakst".publicKey; vno1-oh2 = (import ./data.nix).hosts."vno1-oh2.servers.jakst".publicKey; + vno1-op5p = (import ./data.nix).hosts."vno1-op5p.servers.jakst".publicKey; vno3-rp3b = (import ./data.nix).hosts."vno3-rp3b.servers.jakst".publicKey; - systems = [fra1-a vno1-oh2 vno3-rp3b fwminex]; + systems = [fra1-a vno1-oh2 vno1-op5p vno3-rp3b fwminex]; mk = auth: keyNames: builtins.listToAttrs (