Toast/nix-stuff
1
0
Fork 0
Code Issues Pull requests Projects 1 Wiki Activity

Compare commits

base: Toast:1ecb8c32dc61757f5ec17ebb0c1b9bae291bfb87
Branches Tags
Toast:main
Toast:plasma-refactor
Toast:headscale
Toast:plasma6
Toast:catppuccin
Toast:kde-stuff
Toast:firefox
Toast:upgrade-to-23.05
...
compare: Toast:d02fae40add7ca435ed9b1293d6ba122cfc0716c
Branches Tags
Toast:main
Toast:plasma-refactor
Toast:headscale
Toast:plasma6
Toast:catppuccin
Toast:kde-stuff
Toast:firefox
Toast:upgrade-to-23.05

3 commits
1ecb8c32dc ... d02fae40ad

Author SHA1 Message Date
Toast
d02fae40ad Flake: update secrets 2024-02-20 00:11:30 +01:00
Toast
38ad6796a1 Server/ddclient: update password 2024-02-20 00:11:10 +01:00
Toast
c6a89378c6 Remove secrets folder 2024-02-20 00:10:00 +01:00
4 changed files with 11 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

8
flake.lock generated
View file

@ -418,11 +418,11 @@
"secrets": {
"flake": false,
"locked": {
"lastModified": 1708379923,
"narHash": "sha256-3V7lwL+GQIi3os9jDetzl5Y1+Rgs2ES5kwjHzG9HteU=",
"lastModified": 1708383844,
"narHash": "sha256-cl5HngHhGW6qkvjv9ZSaiQuZKXfxlDfM4IDVPyMRBcY=",
"ref": "refs/heads/main",
"rev": "90dd2143e21ba1442b054c47a09d5a15229cf5f7",
"revCount": 6,
"rev": "31ef63532cf9907e8580741f1c9428b4176874cf",
"revCount": 8,
"type": "git",
"url": "http://git.everest.sable-pancake.ts.net/Toast/nix-secrets"
},

10
roles/server/ddclient.nix
View file

@ -1,8 +1,12 @@
{ config, ... }:
{ config, flakeSelf, ... }:
let
hostSecrets = "${flakeSelf.inputs.secrets}/" + config.networking.hostName;
in
{
# Set up secrets
age.secrets = { ddclient-passwd.file = ../../secrets/ddclient-passwd; };
age.secrets = { ddclient-passwd.file = hostSecrets + "/ddclient-password.age"; };
services.ddclient = {
enable = true;
@ -13,4 +17,4 @@
passwordFile = config.age.secrets.ddclient-passwd.path;
domains = [ "@" ];
};
}
}

BIN
secrets/ddclient-passwd
View file

Binary file not shown.

10
secrets/secrets.nix
View file

@ -1,10 +0,0 @@
let
everest = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBYENWORu3M32NIIip8gZO5VbCUBwsT2RgOU8ATsASpc root@Everest";
bootsrtrap = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMKloSXSeF4dNXebd93uMuiFuXRHfxo/he4+O9SFTz1s bootstrap key";
in
{
"ddclient-passwd".publicKeys = [ everest ];
"cock".publicKeys = [ everest ];
"syncthing/key".publicKeys = [ everest ];
"syncthing/cert".publicKeys = [ everest ];
}