work on remote dev set up on sj-bm-hostkey0

This commit is contained in:
steveej 2023-11-24 11:34:17 +01:00
parent 9145d430bd
commit d86fdd61c9
6 changed files with 87 additions and 75 deletions

View file

@ -4,6 +4,7 @@
# for a more complex example.
# use `ssh-keyscan <IP> | ssh-to-age` to get the age key for a remote machine
# use `for file in $(grep -lr "sops:") secrets; do sops updatekeys -y $file; done` for updating
keys:
- &steveej 6F7069FE6B96E894E60EC45C6EEFA706CB17E89B
- &steveej-t14 age17jxphuql70wjkd84azn62ltx9ky69hyvkac23lm8f2j92lznf9hseqq0vl
@ -14,8 +15,7 @@ keys:
- &srv0-dmz0 age13cyvxrd28j68f97q2dwsn62q5dy8tdxtq86ql2dxv2ncwfrf63dsmkj7n3
# - &router0-dmz0 age1jetxwpmd9hc4crkjtrdle2qxn9dlq7vcmqhfslv0vlxctrk4u3xq8hcvkz
- &router0-dmz0 age1k7cejd9tqz6a3expd63wkn7kmeawhhrp9vy5vevhjn6eavhdwywqeh7j86
- &sj-bm-hostkey0 age19dh6zurkx4xv6dx9lvjw0hychjjqvpcf6aq2s2y8srdk6g82qctqqkmu3v
- &sj-bm-hostkey0 age1dw43sxtdxptzgyhsxhrj36x5gn7376gqk45t7wtyt3s97v7ux39sdmdd44
creation_rules:
- path_regex: ^(.+/|)secrets/[^/]+$
key_groups:

View file

@ -2,7 +2,6 @@
imports = [
../profiles/common.nix
../programs/neovim.nix
# ../programs/zsh.nix
];
home.packages = with pkgs; [

View file

@ -5,15 +5,17 @@
in {
programs.vscode = {
enable = true;
package = pkgs.vscodium;
# package = pkgs.vscodium;
extensions = with pkgs.vscode-extensions;
[
bbenoist.nix
vscodevim.vim
ms-vscode-remote.remote-ssh
# bbenoist.nix
# vscodevim.vim
# rust-lang.rust-analyzer
# mkhl.direnv
]
++ marketPlaceExtensions;
mutableExtensionsDir = false;
mutableExtensionsDir = true;
};
home.packages = [pkgs.nixpkgs-fmt pkgs.alejandra];

View file

@ -23,17 +23,30 @@
# TODO
# ./network.nix
# ./monitoring.nix
{
services.openssh.enable = true;
services.openssh.settings.PermitRootLogin = "yes";
# user config
{
users.commonUsers = {
enable = true;
enableNonRoot = true;
};
home-manager.users.root = import ../../../home-manager/configuration/text-minimal.nix {
inherit pkgs;
};
home-manager.users.steveej = import ../../../home-manager/configuration/text-minimal.nix {
inherit pkgs;
};
programs.zsh.enable = true;
users.defaultUserShell = pkgs.zsh;
environment.pathsToLink = ["/share/zsh"];
}
];
services.openssh.enable = true;
services.openssh.settings.PermitRootLogin = "yes";
nix.nixPath = [
"nixpkgs=${pkgs.path}"
];
@ -45,7 +58,7 @@
};
};
nix.settings.experimental-features = ["nix-command" "flakes"];
nix.settings.experimental-features = ["nix-command" "flakes" "ca-derivations"];
boot = {
kernel = {
@ -91,8 +104,6 @@
disk = {
sda = disk "sda";
sdb = disk "sdb";
sdc = disk "sdc";
sdd = disk "sdd";
};
mdadm = {
raid0 = {

View file

@ -16,82 +16,82 @@ sops:
- recipient: age17jxphuql70wjkd84azn62ltx9ky69hyvkac23lm8f2j92lznf9hseqq0vl
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyYi85VUFBRUJCYVN2ZXlS
bGV0Y0JacVdvZy9ybDIyQWJCcmVuL2tsRkJ3CnRqZUZzS2JpbXJnVkFFUXdrZHhX
cU5LOGdsZGE2bXZWMWRVVURISytRSWsKLS0tIDl5WGkzeEEvMEFTVDVDM0k3cmRz
VnV5V3B4aUxyMlR2eU9XK0R3TDdNUG8KlYfhYcUK4R1MJj3IaivsxBrUJUMkkosC
dUSewl/N47us5UhVPUxYQBgYs9332nZxDN8FopOkruBMPpPLwrJdAg==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlbG5RWWVBZ2JZOXlENDVr
M3lCdEc4RnVwWlZJZXY5RGJ5aEFmcmlmK0hFCnNFSHliMHZyWTBLZG5ub2hPSy93
dDNoWmgvTEhQdUdWL1dEbDZpRnBacFUKLS0tIFpjdVZBZjhRdll2TGdKdFVQTzVp
UDV5bXpzWXNzMTQwTkZPVjc0ckNUUFEKwYIl0ErBjh83ogRau2mYzkivxruLKQXj
eEQgNMf/xdWZ76OAKDwCF/7zmCSeT2UYoJFCfYtnMw7OxwOCyvPIOg==
-----END AGE ENCRYPTED FILE-----
- recipient: age1pmznn2tjpelpmxjxqef48rse5ujggf9kcr8x5vewuadqcw03aavqwy54zm
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKQjcvdUQvNVl1R2Jkb0pK
WEhMRWh4NTRZQlY5aFk5bkFiUDdNQUdodDJBCmd4S3Z0cFlWSUFTZWVMUVJWNnZW
ZUNLTjFGSm1idktlbmJUNlJvZGVOR00KLS0tIDVlZGpyREJvT0wveFp4MEFia2FX
MHRDUmdKc21LZ0hIV1RjM0Q2VndobVEKK7C4tLmM3Hd8Telyf3zOUXv8LjftOahd
aQkPG4rEhF/WBchqZsSviXm9E78Hvvmtgn4rKtVkSH8rzjpgvXo3Qg==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAramZoZmdSOFdoWEttNndT
RHVWUC9RekVVL21iQVA5Z3JvajliSVZVNVNFCjhiMkdGOXNTa2FnVStUTVRVZm1s
Y1ZVdGFnZ0I2VGYxTW1Wakt5Znd3NXcKLS0tIERvVjFySDJDU3lRNGlpL3pYRWwy
UU0ybTRsSVlBaFV2d2xqVTc5Q1lNQWcKUti+W3HLneDzq/VI5yPBsTPyDUAUYL6U
tO1SMC8xBVbgzlFQtM84gYCE8ATxvwOJV+8wNrcHdWXQ8AJLF9UwPA==
-----END AGE ENCRYPTED FILE-----
- recipient: age1ye4fa0v37shz8q4e5uf9cp2avygcp9jtetmnj2sv9y9mqc7gjyksq2cjy8
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyK3BCdHNjRUFDblg1VEdK
aUs4SlZOMjl0THE4OGpwZ3VkU2t0NFkxU0FrCnlKYTMwU1RHVHVjYlI3TGQ4VGU5
bytSWHBOQXY5ZXNEVXNZNjQ2RFdmU2cKLS0tIERvazdiSGVkN2JaM0pZRTNRd2t5
aTE4eEN1UW5CdGFqajJteFRybHIreVkKsVHK+eFx3ElSV/YCZ/E6xM8P21dd++BB
ifitWuHXifFXGY/peJti4SII5msn/f9ICbSzoJhpBplHOWaldqYcGw==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2ZXpGREZxdzREU0tSV1Nu
ZnVONGdxU0VBb3RXY21pTEJVWUw3aUV1UG5ZCmZYcXVzdUgzalFvdXR1Q0FESENF
Q0VDSmlqbGRxemlGYVRQN2NQcGU3VEEKLS0tIFp1N2V6V3dkeWVpRGtrTzhyNUFE
TUdFcXpEbnpmdTlWM1I3UTBYSFo5UnMKJm4gkNDHnCujMk+i46hGEMoQWEs9IBRM
/Lb1BpHA+5BB0LB6yL1VkXttSBNp69s5LN/EgdvTnZ7qL4/KqhwvMg==
-----END AGE ENCRYPTED FILE-----
- recipient: age13cyvxrd28j68f97q2dwsn62q5dy8tdxtq86ql2dxv2ncwfrf63dsmkj7n3
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzazlmT0RNazJhc0F1aExH
MHo4cUFvdnFzY3NidXk0b2pPM3dhNjZyMURZCmNNOVlBcTdNbklMcjZXUkFzU2hS
SHU0YTJqc0VPUksxSlUweDlJdUI4OUUKLS0tIGdONkNzb3p6eUd6aHorNzQrLzI4
ZkNiNG45OGI2dDgyUUhHV1BMZWJ6VzgKTgrpzF6L2ZTiwmgc8xFrkg4yJwzCR3Ik
8pCH8vSHzobEHly5haV7wxcgdhC6HX3YbXiLCClsRsDemNXTdXAtrg==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxSk9GbVpxaHJPUGY4U3hu
K3hpbzhkMWVJNHIrNWVPRUphcjkvY0h1cWpnCkxYTmtiWjk2QktxSHJON01XRGJD
MDZZZlB3dU9NbXN4RHRMc2ZRTHdERE0KLS0tIFJpdUhWdm1INFU3eU96NFN3OFk1
Z2dMQ2xGOTJCcXdCU0FFdVJjQVIwK1EKHLo6YIsfKAwQ/yBQvS1icIAS6W7AwABw
d5hD2G0KVJK66HnYWuQALQbuWh2i0OA2fNAywcKe4R5ACN5M8TKHew==
-----END AGE ENCRYPTED FILE-----
- recipient: age1k7cejd9tqz6a3expd63wkn7kmeawhhrp9vy5vevhjn6eavhdwywqeh7j86
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDTUMwOStKMVc5bGJvY1po
NUs4Sk54anFlRGtGeW9ZSTUxTkV4bEdpMHhnCmtUemE1TkZSZUhPRTdRZU1HL04x
djJINTBoVEgvMkxCSFVxVzcxSUNxWDAKLS0tIEN5L2lBVnBuYnJKdm5kVzh5VVlW
RmJmUXdldnlaTWNFMUtvaHVnRFJEYm8KjZ4WNll1U899AAtuc4B6koiU1r7wBUcR
eEdwOK11BaqfQo+qorkN3TW85MsOWZHEhsG81ukkYlZ/uq/ewNb0uA==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3dEttcnphWlVpbTdET1pY
L2RxWkx2VWVxZ21URE53MFg1cVFpTkwxN1N3CmJSRk1DY2JkZk5DMlUvZFp5RXNw
YWh0Q1FxTUJwTWNVY09NTTdSRHEzM1UKLS0tIEREeGY4M2J1QWZUTThhTWxoOUVX
QVJSemJ4eldSbGU4dWZtU1hRNi9VQk0KhT8lL2mk8J/uZ0dECGbi14Se2cC7l6AK
yWgNHggdrPcSvHH/A2u1yUdfQCU36yEvoxAwa8y/uQW3lgU35iVT+g==
-----END AGE ENCRYPTED FILE-----
- recipient: age18dmqd7r7fanrfmdxsvwgv9psvhs3hw5ydpvw0na0dv3dlrg4rs3q2wpvgv
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEY0JqdXRyRnRieHNtK0J1
Y1lTbENNZVVjRENwejd3MmVNQnpaeUZOcm1BCkVYZWdSaE9VUGVmWWpVTWFBdjFo
WmUyQU9rZVBQVkFjaDdTaFJsN2ZYQUEKLS0tIFBZOU5pZE0yV0VBa0dXVUIvZ0hQ
NWM1aEJMeUpvQ25pMWJiWEhrR083b28KlXIkNJMl3R6OUQ6934h1ACtkzvWDsoxs
Jl/x29gSl62i2PwFlJWOw6GtnrO2xYJPyUPovS+oLqaxol2t/zVvZw==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuT29LTzAxcHZPd0VFa2pG
ZVJ6K2tiT2V3MDJlakpjZ1puczFWZEdORFJNCitNRzViZHU4ZTRXMmJZYUZqRHJ2
aDZtRlAyMDdOUHoxbWJ1c0JHaURXSlEKLS0tIHpnRitqc1BmV3FyUjZQcGtZZUtG
dXRPaEJna0duZDVLZVRpODM2enpiUmcKWLmGdJzLZ6UMcGRAzCb/UmsHl1Q+FQgk
IPTiCyyun+1JjWMSXC/z7rf2LFuvWvPPxHOChnYivBD60BYMgHJ8Sg==
-----END AGE ENCRYPTED FILE-----
- recipient: age19dh6zurkx4xv6dx9lvjw0hychjjqvpcf6aq2s2y8srdk6g82qctqqkmu3v
- recipient: age1dw43sxtdxptzgyhsxhrj36x5gn7376gqk45t7wtyt3s97v7ux39sdmdd44
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2dXFTZ2FyYlVTZWNsbUp1
c0pOZ0lFYjQrZkg4U0dxd3V4UEpGcEFYdFJZCldUTWNnYzlvOUJVY2x5ZkJhNENj
dzJrMGFvWkNMazB0dElrMmcvcG5uaGcKLS0tIE10NkxpL0haeTBMb2cvbm00eUw5
T0hFMk1xclpveUlhVFNqYmphUDNkVUEKBCwyqIOLWbqdU1qVhxnYr0EsEz8gn0s/
HAnLDED0abRZ4jwKZ1DfACKuBcC8NnIdxFmQ7z+YzheObxznXlYAcA==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXN1hoQWdERDRTN0lJM0pI
RWcvZXVPN3ljd0h0QTA1SmN6dlorVi9vWjNNCmhscXhNTmhBVlZZN3VzdzFnRWNt
VTlTUGk0RnRIaHF2bnBPeFpOVHY4RGsKLS0tIDA5MjVFZnU3bTE3bHZZSzJJQmpD
NEJkTStUaWVzZTNpKzZNTnRmR0tJUGsKBsVqJ0Xg8qWHGb2IDJXrEq4k4LgQFhQS
HrVF7MAwE/WSnGRhh/V8osej3QHW4vLg37IjaT6v+hCcBOiJeCqg5g==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2023-07-06T20:14:22Z"
mac: ENC[AES256_GCM,data:GPWu5DjjJ1ki+HRuedGdDCt+2V0RPbOsD/yWJxPIkgu5923vnF8y9y4V6e6+ZsTqHv4hsKeCjKtUnh2Ldn+xadwJmqrIxyJ8NzH5TOvcBxAab9cJCp/yKENw0O1WMUTlDPelvQKMDwbgiebaVVfxbQPUEfJGOgkHkyXrgqN94FU=,iv:h9YALYahUl7mRJmZKjArEfaMrfW9YZkVYd2CEooF13Q=,tag:wotqxup/ouG/bEVOZCs19w==,type:str]
pgp:
- created_at: "2023-11-23T12:05:36Z"
- created_at: "2023-11-23T20:47:07Z"
enc: |-
-----BEGIN PGP MESSAGE-----
wcBMA0SHG/zF3227AQf+LBa7dBh5AErdSgvKq/SjOR/eV/gQonPtct5Z5J6tz3bV
8AD9WG9kOpV2TPQ1iNLC46vXsMEsIWBNcCI/qzMLZOfY9I6dQbxlTYBPOj7aBjTa
cWdYvBEmu7GTEaUVMrqqnT9+I8HL/haBegCx8vvOOksuj+IZnVp9/cW/zxRJrdxv
Lbf/3X21ePXlxNXtuqX1pyvwa3eZsHywq8C61JKRSOuX1m8WxK4Jblvl25x5l2pW
YxQpSAHHozQuRulg/dSF9GASOKpaFZU6lG3yg2AQl4FLS5wz7xA1USh6SQq8qX1n
Za28CrxSmxr/os8gnavPP6/Jx1ZDnQlVWYcYT0v9aNJRAVMHPULNlWD+zZZBj6Kl
vbNvcBlDoez8irriROfbcYV3q8yN3InaIdhu03tqoogUfL2DJAyDlzp3W3k92j/C
PWblzIzIIeqL3M0wGr7FCu3O
=tmkx
wcBMA0SHG/zF3227AQf/Y907bW+LYWHAT8FPF12f8+GvUy744+9sMZe3oSX1ML9F
JOEjxSOs9OCWM79qBIMI6Nets3lV1eEoR8eG74jcIwNPQMfQn/U4hHtJM9Nq4yI7
1FLQEfGZcuSMUk2/1c/9lEi+Sye9W+9ZYGUIcvBu1ksPmZpJT/BVOaNc8xWe1hzY
FmEzwaWAPaxSH1EM3KnPhxezzn76DxjDKc4iMNi+5UoAIT2cssbdckf5uDaTa3CE
6GrfR9//5ldsPqineM2MHeEMHgn+mlVYmpiXNBCfcMfEi81o6l5nmNjy1qjABEKC
254kSW+vMFOhdH6AZvJ/21z/3aUTwMM2mFEti/nh4dJRAWNWEymviIC1o2esJ9K6
77xHv4pEIEahuBcHLBbeBK3AYYqJxcZr5BhIqGAir8OlCOaXzRsN5ElzmVS+Hoib
t04nfgpuRfKyso0zrndvLwDn
=lmD0
-----END PGP MESSAGE-----
fp: 6F7069FE6B96E894E60EC45C6EEFA706CB17E89B
unencrypted_suffix: _unencrypted

View file

@ -5,31 +5,31 @@ sops:
azure_kv: []
hc_vault: []
age:
- recipient: age19dh6zurkx4xv6dx9lvjw0hychjjqvpcf6aq2s2y8srdk6g82qctqqkmu3v
- recipient: age1dw43sxtdxptzgyhsxhrj36x5gn7376gqk45t7wtyt3s97v7ux39sdmdd44
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2WGw5L3JxMk9xL1BMSEVj
cmV1YUhRNDgxRnArdCtOTGhwdFJ0YjlSQVVnCmlHejd4b3g0U0pVeEtxc0hGYzNC
eTUvQklBUTgrVkc2ZmZ4Z3VQejlEMTgKLS0tIFFsZ25zRnFTMWVGTDNQNERWT2k2
cnJyV0ZObnR6Z0xjTk9yRXdEdVNFQXMKyRkyqkRida6fw6aFcLw9ecPWSrShMu8+
H5WNqM1aNuajMFasRxofKvmakKoWpo4utRb8xqtorPLe/7sm6WMFJg==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBa2YwTDAyWUZqRjFPWnc3
R2FySXZ4d2RxRjlLTkZFblZIOUNPUS9kM1EwCjUrNTE2cmx6bGVTOXljZVllQzJG
clBPa1BjcC9GQ3Z6N0xYSFMvZ0J2c0EKLS0tIFQzQ2NHdmJBTFdNck53NVVyejRN
Y0xhYnI3MlhnbjhTS1dFMUdNZFdnSjgK4cl3R943LNMxA3dODf8nsSdmINkKIjB+
fgp2whfSacWQchsWgpzdiayQoZ9XlWoklmTAX+yN0J8Q3j3CBb3S5g==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2023-11-23T11:45:17Z"
mac: ENC[AES256_GCM,data:VFEtWuEoqlU3wW8SwgWjlnnuv8aJw5Az9j82gc9YfexwR6lNyyQHY5EdZfqPdO4ZRNLen60Xq98kotTYiY7GJ9x3ZR8KPW3puRvqeD8qZf1NMwvkzQliZ+078HCBHmBTeoouWLuvWdP9uv3XOQWdR7/ZfMB/eC4bWS+Acq+tVZ4=,iv:5CRupDm9jNslcn96kUrhQdT5zadEqyKtrKbv+BtcYW0=,tag:ukHLjRdZCTRliB+LXGBHWQ==,type:str]
pgp:
- created_at: "2023-11-23T12:05:37Z"
- created_at: "2023-11-23T20:47:08Z"
enc: |-
-----BEGIN PGP MESSAGE-----
wcBMA0SHG/zF3227AQf/Yd7gY/2c4vOYMbLIpvj5T8MRzNE2zd6tFaAneOAcjoIA
75mnXSAl1SJRvGkLVE1OmUlzx9b+i7GN2HM+Sv15YuOF0wZ7aBXZO8KvifGHXPyd
8DQ/K/amNLtuX73vQ80YOTOcXt1y79ZS+ku1kpCimByulCHOwAQjpizqkYSbIKAw
gv6Gb3UgMfzbZi3HWkuliqvrJRVk43nAavzoYwl1vNt55rsyxVLEtSGL8BzKhmu0
B5wY97/Y5RFo3bSEu5gvSxOBbX6EjOPfW4FvuqIx2NpMe0GpMzrZdGsD4yXKUi/c
1cNQ5EAnH1d789JBwHjtx/gXI6HndLuAvBQqJPjqGtJRATMeOBT6EWPcRPQD8zgZ
maohAle4gYeJNxdITzqjPwHzYx+y8VmQsDlRKapdMjPL2IqJYB1NNKHZE0uXkLWM
g7Nz8IknuR+g7FUI278+crnq
=4ocC
wcBMA0SHG/zF3227AQf/VZ3eNZsb6emw7b5N9rgkRqTW3QvHe/w2QJcjCjp4Hk2M
Es2jYS6EaMLvduiSf6Xl5qHoQNS+HfM3GBKyRdgP/AcrjXXqj5CzmmbMYk5MY2oU
qseV4VFvvk9i9gbHaGbbntixYHBDeBSEHb/k7jWfUxz4wPhSWxpsEW/UQ1UabDgU
C54m3l9NoJw8oseDHOW7gTPW1mm1KFVBqaJ9zeZX5FHSJ0OBDj015wuGwTxkR7pv
/NL1Xg3wtpYHEhRKh1qxqwijW6EkTK9aAJFutkkYE9nI4x48cLCHjDg1GbXgYQkn
5rPRZPPmWhJPJIyCZIX1RkrVSXSIkI2Vjr3iKpEfltJRAY1KD6PSI3rWRHPDbM7B
oFIdVwLKvV1tBrdVk+3M+nDrXwEshBJUt7r9GTdsWVxjdFgCteTkgkSnzM2y5mbG
AUodj6a/Fvni4sYQka1QbRLn
=YLrT
-----END PGP MESSAGE-----
fp: 6F7069FE6B96E894E60EC45C6EEFA706CB17E89B
unencrypted_suffix: _unencrypted