mirror of
https://github.com/Swarsel/.dotfiles.git
synced 2025-12-06 17:17:22 +01:00
60 lines
2.2 KiB
Nix
60 lines
2.2 KiB
Nix
{ config, lib, ... }:
|
|
let
|
|
mkIfElse = p: yes: no: lib.mkMerge [
|
|
(lib.mkIf p yes)
|
|
(lib.mkIf (!p) no)
|
|
];
|
|
in
|
|
{
|
|
sops = lib.mkIf (!config.swarselsystems.isPublic) {
|
|
|
|
age.sshKeyPaths = mkIfElse config.swarselsystems.isBtrfs [ "/persist/.ssh/sops" ] [ "${config.users.users.swarsel.home}/.ssh/sops" "/etc/ssh/ssh_host_ed25519_key" ];
|
|
defaultSopsFile = mkIfElse config.swarselsystems.isBtrfs "/persist/.dotfiles/secrets/general/secrets.yaml" "${config.users.users.swarsel.home}/.dotfiles/secrets/general/secrets.yaml";
|
|
|
|
validateSopsFiles = false;
|
|
|
|
secrets = {
|
|
ernest = { };
|
|
frauns = { };
|
|
hotspot = { };
|
|
eduid = { };
|
|
edupass = { };
|
|
handyhotspot = { };
|
|
vpnuser = { };
|
|
vpnpass = { };
|
|
wireguardpriv = { };
|
|
wireguardpub = { };
|
|
wireguardendpoint = { };
|
|
stashuser = { };
|
|
stashpass = { };
|
|
githubforgeuser = { };
|
|
githubforgepass = { };
|
|
gitlabforgeuser = { };
|
|
gitlabforgepass = { };
|
|
};
|
|
templates = {
|
|
"network-manager.env".content = ''
|
|
ERNEST=${config.sops.placeholder.ernest}
|
|
FRAUNS=${config.sops.placeholder.frauns}
|
|
HOTSPOT=${config.sops.placeholder.hotspot}
|
|
EDUID=${config.sops.placeholder.eduid}
|
|
EDUPASS=${config.sops.placeholder.edupass}
|
|
HANDYHOTSPOT=${config.sops.placeholder.handyhotspot}
|
|
VPNUSER=${config.sops.placeholder.vpnuser}
|
|
VPNPASS=${config.sops.placeholder.vpnpass}
|
|
WIREGUARDPRIV=${config.sops.placeholder.wireguardpriv}
|
|
WIREGUARDPUB=${config.sops.placeholder.wireguardpub}
|
|
WIREGUARDENDPOINT=${config.sops.placeholder.wireguardendpoint}
|
|
'';
|
|
".authinfo" = {
|
|
owner = "swarsel";
|
|
path = "${config.users.users.swarsel.home}/.emacs.d/.authinfo";
|
|
content = ''
|
|
machine stash.swarsel.win:443 port https login ${config.sops.placeholder.stashuser} password ${config.sops.placeholder.stashpass}
|
|
machine gitlab.com/api/v4 login ${config.sops.placeholder.githubforgeuser} password ${config.sops.placeholder.githubforgepass}
|
|
machine api.github.com login ${config.sops.placeholder.gitlabforgeuser} password ${config.sops.placeholder.gitlabforgepass}
|
|
'';
|
|
};
|
|
};
|
|
};
|
|
}
|