mirror of
https://github.com/Swarsel/.dotfiles.git
synced 2025-12-06 17:17:22 +01:00
59 lines
2.5 KiB
Nix
59 lines
2.5 KiB
Nix
{ self, config, lib, ... }:
|
|
let
|
|
certsSopsFile = self + /secrets/certs/secrets.yaml;
|
|
in
|
|
{
|
|
sops = lib.mkIf (!config.swarselsystems.isPublic) {
|
|
|
|
age.sshKeyPaths = lib.swarselsystems.mkIfElseList config.swarselsystems.isBtrfs [ "/persist/.ssh/sops" "/persist/.ssh/ssh_host_ed25519_key" ] [ "${config.users.users.swarsel.home}/.ssh/sops" "/etc/ssh/ssh_host_ed25519_key" ];
|
|
defaultSopsFile = lib.swarselsystems.mkIfElseList config.swarselsystems.isBtrfs "/persist/.dotfiles/secrets/general/secrets.yaml" "${config.users.users.swarsel.home}/.dotfiles/secrets/general/secrets.yaml";
|
|
|
|
validateSopsFiles = false;
|
|
|
|
secrets = {
|
|
ernest = { };
|
|
frauns = { };
|
|
hotspot = { };
|
|
eduid = { };
|
|
edupass = { };
|
|
handyhotspot = { };
|
|
vpnuser = { };
|
|
vpnpass = { };
|
|
wireguardpriv = { };
|
|
wireguardpub = { };
|
|
wireguardendpoint = { };
|
|
stashuser = { };
|
|
stashpass = { };
|
|
githubforgeuser = { };
|
|
githubforgepass = { };
|
|
gitlabforgeuser = { };
|
|
gitlabforgepass = { };
|
|
"sweden-aes-128-cbc-udp-dns-crl-verify.pem" = { sopsFile = certsSopsFile; owner = "swarsel"; };
|
|
"sweden-aes-128-cbc-udp-dns-ca.pem" = { sopsFile = certsSopsFile; owner = "swarsel"; };
|
|
};
|
|
templates = {
|
|
"network-manager.env".content = ''
|
|
ERNEST=${config.sops.placeholder.ernest}
|
|
FRAUNS=${config.sops.placeholder.frauns}
|
|
HOTSPOT=${config.sops.placeholder.hotspot}
|
|
EDUID=${config.sops.placeholder.eduid}
|
|
EDUPASS=${config.sops.placeholder.edupass}
|
|
HANDYHOTSPOT=${config.sops.placeholder.handyhotspot}
|
|
VPNUSER=${config.sops.placeholder.vpnuser}
|
|
VPNPASS=${config.sops.placeholder.vpnpass}
|
|
WIREGUARDPRIV=${config.sops.placeholder.wireguardpriv}
|
|
WIREGUARDPUB=${config.sops.placeholder.wireguardpub}
|
|
WIREGUARDENDPOINT=${config.sops.placeholder.wireguardendpoint}
|
|
'';
|
|
# ".authinfo" = {
|
|
# owner = "swarsel";
|
|
# path = "${config.users.users.swarsel.home}/.emacs.d/.authinfo";
|
|
# content = ''
|
|
# machine stash.swarsel.win:443 port https login ${config.sops.placeholder.stashuser} password ${config.sops.placeholder.stashpass}
|
|
# machine gitlab.com/api/v4 login ${config.sops.placeholder.githubforgeuser} password ${config.sops.placeholder.githubforgepass}
|
|
# machine api.github.com login ${config.sops.placeholder.gitlabforgeuser} password ${config.sops.placeholder.gitlabforgepass}
|
|
# '';
|
|
# };
|
|
};
|
|
};
|
|
}
|