This commit is contained in:
2025-10-10 01:42:26 +03:00
parent b19ca0410e
commit 93a4f8c837
2 changed files with 6 additions and 8 deletions
-4
View File
@@ -19,10 +19,6 @@
sops.secrets.minifluxenv = { sops.secrets.minifluxenv = {
format = "dotenv"; format = "dotenv";
sopsFile = ./secrets/miniflux.env; sopsFile = ./secrets/miniflux.env;
# key = null;
# owner = "miniflux";
# group = "miniflux";
mode = "0650"; mode = "0650";
# path = "/run/secrets/miniflux.env";
}; };
} }
+6 -4
View File
@@ -39,8 +39,6 @@
sshKeyPaths = [ sshKeyPaths = [
"/etc/ssh/id_ed25519" "/etc/ssh/id_ed25519"
]; ];
# keyFile = "/var/lib/sops-nix/key.txt";
# generateKey = true;
}; };
defaultSopsFile = ../secrets/default.yaml; defaultSopsFile = ../secrets/default.yaml;
secrets = { secrets = {
@@ -58,14 +56,18 @@
}; };
ssh_key_private = { ssh_key_private = {
format = "yaml"; format = "yaml";
# sopsFile = ../secrets/default.yaml;
key = "ssh_key_private"; key = "ssh_key_private";
path = "/home/${xlib.device.username}/.ssh/id_ed25519"; path = "/home/${xlib.device.username}/.ssh/id_ed25519";
owner = config.users.users."${xlib.device.username}".name; owner = config.users.users."${xlib.device.username}".name;
group = config.users.users."${xlib.device.username}".group; group = config.users.users."${xlib.device.username}".group;
mode = "0600"; mode = "0600";
}; };
ssh_key_private_host = {
format = "yaml";
key = "ssh_key_private";
path = "/etc/ssh/id_ed25519";
mode = "0600";
};
ssh_key_public = { ssh_key_public = {
format = "yaml"; format = "yaml";
key = "ssh_key_public"; key = "ssh_key_public";