steveej/infra
1
0
Fork 0
Code Issues 2 Pull requests Projects Releases Packages Wiki Activity Actions

feat(sj-vps-htz0): separate secrets

Browse source
This commit is contained in:
steveej 2023-08-11 18:49:31 +02:00
parent 6a2993b665
commit 415d18e75d
2 changed files with 25 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

20
nix/os/devices/sj-vps-htz0/configuration.nix
View file

@ -1,12 +1,28 @@
{...}: {
{
nodeName,
config,
...
}: {
disabledModules = [];
imports = [
../../profiles/common/configuration.nix
{
users.commonUsers = {
enable = true;
enableNonRoot = false;
rootPasswordFile = config.sops.secrets.passwords-root.path;
};
sops.secrets.passwords-root = {
sopsFile = ../../../../secrets/${nodeName}/secrets.yaml;
neededForUsers = true;
format = "yaml";
};
}
../../modules/opinionatedDisk.nix
./system.nix
./hw.nix
./pkg.nix
./boot.nix
];
}