motiejus
/
config
1
Fork 0
Code Packages Releases Activity

finish/fix moving age.secrets

This commit is contained in:
Motiejus Jakštys 2024-08-27 08:57:17 +03:00
parent 748d42d9e0
commit bb58bcfed5
6 changed files with 36 additions and 40 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
flake.nix
View File

@ -187,21 +187,9 @@
modules = [ modules = [
{ nixpkgs.overlays = overlays; } { nixpkgs.overlays = overlays; }
./hosts/vno3-rp3b/configuration.nix ./hosts/vno3-rp3b/configuration.nix
./modules ./modules
agenix.nixosModules.default agenix.nixosModules.default
home-manager.nixosModules.home-manager home-manager.nixosModules.home-manager
{
age.secrets = {
motiejus-passwd-hash.file = ./secrets/motiejus_passwd_hash.age;
root-passwd-hash.file = ./secrets/root_passwd_hash.age;
sasl-passwd.file = ./secrets/postfix_sasl_passwd.age;
datapool-passphrase.file = ./secrets/vno3-rp3b/datapool-passphrase.age;
};
}
]; ];
specialArgs = { specialArgs = {

6
hosts/fra1-b/configuration.nix
View File

@ -11,9 +11,9 @@ in
imports = [ (modulesPath + "/profiles/qemu-guest.nix") ]; imports = [ (modulesPath + "/profiles/qemu-guest.nix") ];
age.secrets = { age.secrets = {
motiejus-passwd-hash.file = ./secrets/motiejus_passwd_hash.age; motiejus-passwd-hash.file = ../../secrets/motiejus_passwd_hash.age;
root-passwd-hash.file = ./secrets/root_passwd_hash.age; root-passwd-hash.file = ../../secrets/root_passwd_hash.age;
sasl-passwd.file = ./secrets/postfix_sasl_passwd.age; sasl-passwd.file = ../../secrets/postfix_sasl_passwd.age;
ssh8022-server = { ssh8022-server = {
file = ../../secrets/ssh8022.age; file = ../../secrets/ssh8022.age;
owner = "spiped"; owner = "spiped";

28
hosts/fwminex/configuration.nix
View File

@ -14,20 +14,20 @@ in
]; ];
age.secrets = { age.secrets = {
motiejus-server-passwd-hash.file = ./secrets/motiejus_server_passwd_hash.age; motiejus-server-passwd-hash.file = ../../secrets/motiejus_server_passwd_hash.age;
root-server-passwd-hash.file = ./secrets/root_server_passwd_hash.age; root-server-passwd-hash.file = ../../secrets/root_server_passwd_hash.age;
sasl-passwd.file = ./secrets/postfix_sasl_passwd.age; sasl-passwd.file = ../../secrets/postfix_sasl_passwd.age;
headscale-client-oidc.file = ./secrets/headscale/oidc_client_secret2.age; headscale-client-oidc.file = ../../secrets/headscale/oidc_client_secret2.age;
borgbackup-password.file = ./secrets/fwminex/borgbackup-password.age; borgbackup-password.file = ../../secrets/fwminex/borgbackup-password.age;
grafana-oidc.file = ./secrets/grafana.jakstys.lt/oidc.age; grafana-oidc.file = ../../secrets/grafana.jakstys.lt/oidc.age;
letsencrypt-account-key.file = ./secrets/letsencrypt/account.key.age; letsencrypt-account-key.file = ../../secrets/letsencrypt/account.key.age;
vaultwarden-secrets-env.file = ./secrets/vaultwarden/secrets.env.age; vaultwarden-secrets-env.file = ../../secrets/vaultwarden/secrets.env.age;
photoprism-admin-passwd.file = ./secrets/photoprism/admin_password.age; photoprism-admin-passwd.file = ../../secrets/photoprism/admin_password.age;
synapse-jakstys-signing-key.file = ./secrets/synapse/jakstys_lt_signing_key.age; synapse-jakstys-signing-key.file = ../../secrets/synapse/jakstys_lt_signing_key.age;
synapse-registration-shared-secret.file = ./secrets/synapse/registration_shared_secret.age; synapse-registration-shared-secret.file = ../../secrets/synapse/registration_shared_secret.age;
synapse-macaroon-secret-key.file = ./secrets/synapse/macaroon_secret_key.age; synapse-macaroon-secret-key.file = ../../secrets/synapse/macaroon_secret_key.age;
syncthing-key.file = ./secrets/fwminex/syncthing/key.pem.age; syncthing-key.file = ../../secrets/fwminex/syncthing/key.pem.age;
syncthing-cert.file = ./secrets/fwminex/syncthing/cert.pem.age; syncthing-cert.file = ../../secrets/fwminex/syncthing/cert.pem.age;
ssh8022-server = { ssh8022-server = {
file = ../../secrets/ssh8022.age; file = ../../secrets/ssh8022.age;

10
hosts/mtworx/configuration.nix
View File

@ -17,12 +17,12 @@ in
]; ];
age.secrets = { age.secrets = {
motiejus-work-passwd-hash.file = ./secrets/motiejus_work_passwd_hash.age; motiejus-work-passwd-hash.file = ../../secrets/motiejus_work_passwd_hash.age;
root-work-passwd-hash.file = ./secrets/root_work_passwd_hash.age; root-work-passwd-hash.file = ../../secrets/root_work_passwd_hash.age;
sasl-passwd.file = ./secrets/postfix_sasl_passwd.age; sasl-passwd.file = ../../secrets/postfix_sasl_passwd.age;
syncthing-key.file = ./secrets/mtworx/syncthing/key.pem.age; syncthing-key.file = ../../secrets/mtworx/syncthing/key.pem.age;
syncthing-cert.file = ./secrets/mtworx/syncthing/cert.pem.age; syncthing-cert.file = ../../secrets/mtworx/syncthing/cert.pem.age;
ssh8022-client = { ssh8022-client = {
file = ../../secrets/ssh8022.age; file = ../../secrets/ssh8022.age;

12
hosts/vno1-gdrx/configuration.nix
View File

@ -11,12 +11,12 @@ in
]; ];
age.secrets = { age.secrets = {
motiejus-passwd-hash.file = ./secrets/motiejus_passwd_hash.age; motiejus-passwd-hash.file = ../../secrets/motiejus_passwd_hash.age;
root-passwd-hash.file = ./secrets/root_passwd_hash.age; root-passwd-hash.file = ../../secrets/root_passwd_hash.age;
sasl-passwd.file = ./secrets/postfix_sasl_passwd.age; sasl-passwd.file = ../../secrets/postfix_sasl_passwd.age;
borgbackup-fwminex.file = ./secrets/fwminex/borgbackup-password.age; borgbackup-fwminex.file = ../../secrets/fwminex/borgbackup-password.age;
syncthing-key.file = ./secrets/vno1-gdrx/syncthing/key.pem.age; syncthing-key.file = ../../secrets/vno1-gdrx/syncthing/key.pem.age;
syncthing-cert.file = ./secrets/vno1-gdrx/syncthing/cert.pem.age; syncthing-cert.file = ../../secrets/vno1-gdrx/syncthing/cert.pem.age;
ssh8022-client = { ssh8022-client = {
file = ../../secrets/ssh8022.age; file = ../../secrets/ssh8022.age;

8
hosts/vno3-rp3b/configuration.nix
View File

@ -10,6 +10,14 @@
{ {
imports = [ ../../modules/profiles/sdcard ]; imports = [ ../../modules/profiles/sdcard ];
age.secrets = {
motiejus-passwd-hash.file = ../../secrets/motiejus_passwd_hash.age;
root-passwd-hash.file = ../../secrets/root_passwd_hash.age;
sasl-passwd.file = ../../secrets/postfix_sasl_passwd.age;
datapool-passphrase.file = ../../secrets/vno3-rp3b/datapool-passphrase.age;
};
boot = { boot = {
initrd = { initrd = {
availableKernelModules = [ "usbhid" ]; availableKernelModules = [ "usbhid" ];