Toast/nix-stuff
1
0
Fork 0
Code Issues Pull requests Projects 1 Wiki Activity

Compare commits

base: Toast:d02fae40add7ca435ed9b1293d6ba122cfc0716c
Branches Tags
Toast:main
Toast:plasma-refactor
Toast:headscale
Toast:plasma6
Toast:catppuccin
Toast:kde-stuff
Toast:firefox
Toast:upgrade-to-23.05
..
compare: Toast:1ecb8c32dc61757f5ec17ebb0c1b9bae291bfb87
Branches Tags
Toast:main
Toast:plasma-refactor
Toast:headscale
Toast:plasma6
Toast:catppuccin
Toast:kde-stuff
Toast:firefox
Toast:upgrade-to-23.05

No commits in common. "d02fae40add7ca435ed9b1293d6ba122cfc0716c" and "1ecb8c32dc61757f5ec17ebb0c1b9bae291bfb87" have entirely different histories.
d02fae40ad ... 1ecb8c32dc

4 changed files with 17 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

8
flake.lock generated
View file

@ -418,11 +418,11 @@
"secrets": { "secrets": {
"flake": false, "flake": false,
"locked": { "locked": {
"lastModified": 1708383844, "lastModified": 1708379923,
"narHash": "sha256-cl5HngHhGW6qkvjv9ZSaiQuZKXfxlDfM4IDVPyMRBcY=", "narHash": "sha256-3V7lwL+GQIi3os9jDetzl5Y1+Rgs2ES5kwjHzG9HteU=",
"ref": "refs/heads/main", "ref": "refs/heads/main",
"rev": "31ef63532cf9907e8580741f1c9428b4176874cf", "rev": "90dd2143e21ba1442b054c47a09d5a15229cf5f7",
"revCount": 8, "revCount": 6,
"type": "git", "type": "git",
"url": "http://git.everest.sable-pancake.ts.net/Toast/nix-secrets" "url": "http://git.everest.sable-pancake.ts.net/Toast/nix-secrets"
}, },

10
roles/server/ddclient.nix
View file

@ -1,12 +1,8 @@
{ config, flakeSelf, ... }: { config, ... }:
let
hostSecrets = "${flakeSelf.inputs.secrets}/" + config.networking.hostName;
in
{ {
# Set up secrets # Set up secrets
age.secrets = { ddclient-passwd.file = hostSecrets + "/ddclient-password.age"; }; age.secrets = { ddclient-passwd.file = ../../secrets/ddclient-passwd; };
services.ddclient = { services.ddclient = {
enable = true; enable = true;
@ -17,4 +13,4 @@ in
passwordFile = config.age.secrets.ddclient-passwd.path; passwordFile = config.age.secrets.ddclient-passwd.path;
domains = [ "@" ]; domains = [ "@" ];
}; };
} }

BIN
secrets/ddclient-passwd Normal file
View file

Binary file not shown.

10
secrets/secrets.nix Executable file
View file

@ -0,0 +1,10 @@
let
everest = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBYENWORu3M32NIIip8gZO5VbCUBwsT2RgOU8ATsASpc root@Everest";
bootsrtrap = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMKloSXSeF4dNXebd93uMuiFuXRHfxo/he4+O9SFTz1s bootstrap key";
in
{
"ddclient-passwd".publicKeys = [ everest ];
"cock".publicKeys = [ everest ];
"syncthing/key".publicKeys = [ everest ];
"syncthing/cert".publicKeys = [ everest ];
}