From 7cd313ff36fe756e36c68ccd5c93ee7ca2c71364 Mon Sep 17 00:00:00 2001 From: tulg Date: Tue, 28 Apr 2026 16:22:06 +0300 Subject: [PATCH] 67 --- flake.nix | 3 +++ hosts/virgil/secrets.nix | 9 +++++++++ modules/secrets.nix | 5 ----- modules/secrets/secret1.age | 15 +++++++++++++++ modules/secrets/secrets.nix | 5 ++--- 5 files changed, 29 insertions(+), 8 deletions(-) create mode 100644 hosts/virgil/secrets.nix delete mode 100644 modules/secrets.nix create mode 100644 modules/secrets/secret1.age diff --git a/flake.nix b/flake.nix index 85fe2f4..380de29 100644 --- a/flake.nix +++ b/flake.nix @@ -68,6 +68,7 @@ home-manager.nixosModules.home-manager inputs.disko.nixosModules.disko stylix.nixosModules.stylix + agenix.nixosModules.default ./modules/home-manager/stylix.nix { home-manager = { @@ -92,6 +93,7 @@ home-manager.nixosModules.home-manager inputs.disko.nixosModules.disko stylix.nixosModules.stylix + agenix.nixosModules.default ./modules/home-manager/stylix.nix { home-manager = { @@ -115,6 +117,7 @@ ./hosts/beatrice/configuration.nix home-manager.nixosModules.home-manager inputs.disko.nixosModules.disko + agenix.nixosModules.default stylix.nixosModules.stylix ./modules/home-manager/stylix.nix { diff --git a/hosts/virgil/secrets.nix b/hosts/virgil/secrets.nix new file mode 100644 index 0000000..9459f65 --- /dev/null +++ b/hosts/virgil/secrets.nix @@ -0,0 +1,9 @@ +{ + age = { + secrets = { + secret1 = { + file ../../modules/secrets/secret1.age; + }; + }; + }; +} \ No newline at end of file diff --git a/modules/secrets.nix b/modules/secrets.nix deleted file mode 100644 index c8ee9b8..0000000 --- a/modules/secrets.nix +++ /dev/null @@ -1,5 +0,0 @@ -let - tulg = "ssh-rsa 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 tulg@highcommand"; -in { - "secret1.age".publicKeys = [tulg]; -} diff --git a/modules/secrets/secret1.age b/modules/secrets/secret1.age new file mode 100644 index 0000000..1af17b8 --- /dev/null +++ b/modules/secrets/secret1.age @@ -0,0 +1,15 @@ +age-encryption.org/v1 +-> ssh-rsa zhyJXA +QWPXpf6VLS5jEGjF/rmy7qREO38yTWlknR4P3AqP7J0iFQf7G9jBDPtVj8EP51SQ +1/PUu9bL0AZEwGkJA7wFFo39DWXXTfDsGPaHIdNOQFFbNqnxD7FhVkIJ2zDfS6Vc +E0aKdzI9ATJUzUxaE3Cfro377Rs5LNjc5psBrs0WRFr7apVPiMRuVbHTjXkCv22t +1o9wJiWtDehnzRRBtzOL2bs9NhW1vqIUcnw5RLlRD/731tvtIqCd+V9tccvHMTrY +d4sndTcwQp9w7pnBZSJHdrAVeTAmanhBfz7OZyV3PIFy4bUZ+MEt7kZ5yk2O/C/L +YKm3qtzKZfEJtIB33xZUQKSBlc+MQUTRzzOB22L9p6cXLZiHfcxU6S6klohAGM66 +sn+NdtSMIdOYoFUGgbf1gpfrVYQ+77E6BGzHkCt8jnLmxDELrer24fZeegyB08su +5c+/7P/H/F9zZS4MHkfvg5Zk9XOE3HA8omavBguAmXhfgRnBo8ZDTlJLT2lyHAu4 +fOGtQY8dFW8vxTJ8P9EblWQ0+qTrkMndDsEVF2Am/BMJGF269RGYXpBJD941Xctw +y2edNd5u55jHyFvUJV3UMJotux8NLxJ9PXMd9s1DKRVxOzBXpEtKKuTssi78h+N8 +dSV+OFCdMroGKVqY4Aca+q+sEA7ZyOMsVE7b+Sz9djk +--- 9mFY3pDvEQI6l8LsBvHyq/UTo711RqFpXB9mhHQZ4/4 +.'?O"vsb䤄|.CUm'RT ?oZD~!+ǰp \ No newline at end of file diff --git a/modules/secrets/secrets.nix b/modules/secrets/secrets.nix index 73d9703..c8ee9b8 100644 --- a/modules/secrets/secrets.nix +++ b/modules/secrets/secrets.nix @@ -1,6 +1,5 @@ let - tulg = "fssh-rsa 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 tulg@highcommand"; - test31 = "getcancer"; + tulg = "ssh-rsa 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 tulg@highcommand"; in { - "secret1.age".publicKeys = [test1]; + "secret1.age".publicKeys = [tulg]; }