swarsel/.dotfiles
1
0
Fork 0
mirror of https://github.com/Swarsel/.dotfiles.git synced 2025-12-06 09:07:21 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

chore[client]: better pii management

Browse source
This commit is contained in:
Leon Schwarzäugl 2025-11-17 22:46:46 +01:00
parent 80afe6964d
commit 65baf8fa28
Signed by: swarsel
GPG key ID: 26A54C31F2A4FD84
3 changed files with 7 additions and 79 deletions
Download patch file Download diff file Expand all files Collapse all files

40
SwarselSystems.org
View file

@ -12630,7 +12630,7 @@ I use sops-nix to handle secrets that I want to have available on my machines at
It is very convenient to have SSH aliases in place for machines that I use. This is mainly used for some server machines and some university clusters. We also enable agent forwarding to have our Yubikey SSH key accessible on the remote host.
#+begin_src nix-ts :tangle modules/home/common/ssh.nix
{ lib, config, ... }:
{ lib, config, nixosConfig ? config, ... }:
{
options.swarselmodules.ssh = lib.mkEnableOption "ssh settings";
config = lib.mkIf config.swarselmodules.ssh {
@ -12654,43 +12654,7 @@ It is very convenient to have SSH aliases in place for machines that I use. This
controlPath = "~/.ssh/master-%r@%n:%p";
controlPersist = "no";
};
"pfsense" = {
hostname = "192.168.1.1";
user = "root";
};
"bakery" = {
hostname = "192.168.1.136";
user = "root";
};
"dgx" = {
hostname = "192.168.48.200";
user = "swarsel";
};
"winters" = {
hostname = "192.168.178.24";
user = "root";
};
"minecraft" = {
hostname = "130.61.119.129";
user = "opc";
};
"milkywell" = {
hostname = "193.122.53.173";
user = "root";
};
"moonside" = {
hostname = "130.61.238.239";
user = "root";
};
"songdiver" = {
hostname = "89.168.100.65";
user = "ubuntu";
};
"pkv" = {
hostname = "46.232.248.161";
user = "root";
};
};
} // nixosConfig.repo.secrets.common.ssh.hosts;
};
};
}

40
modules/home/common/ssh.nix
View file

@ -1,4 +1,4 @@
{ lib, config, ... }:
{ lib, config, nixosConfig ? config, ... }:
{
options.swarselmodules.ssh = lib.mkEnableOption "ssh settings";
config = lib.mkIf config.swarselmodules.ssh {
@ -22,43 +22,7 @@
controlPath = "~/.ssh/master-%r@%n:%p";
controlPersist = "no";
};
"pfsense" = {
hostname = "192.168.1.1";
user = "root";
};
"bakery" = {
hostname = "192.168.1.136";
user = "root";
};
"dgx" = {
hostname = "192.168.48.200";
user = "swarsel";
};
"winters" = {
hostname = "192.168.178.24";
user = "root";
};
"minecraft" = {
hostname = "130.61.119.129";
user = "opc";
};
"milkywell" = {
hostname = "193.122.53.173";
user = "root";
};
"moonside" = {
hostname = "130.61.238.239";
user = "root";
};
"songdiver" = {
hostname = "89.168.100.65";
user = "ubuntu";
};
"pkv" = {
hostname = "46.232.248.161";
user = "root";
};
};
} // nixosConfig.repo.secrets.common.ssh.hosts;
};
};
}

6
secrets/repo/pii.nix.enc
View file

File diff suppressed because one or more lines are too long