Compare commits

..

No commits in common. "d02fae40add7ca435ed9b1293d6ba122cfc0716c" and "1ecb8c32dc61757f5ec17ebb0c1b9bae291bfb87" have entirely different histories.

4 changed files with 17 additions and 11 deletions

8
flake.lock generated
View file

@ -418,11 +418,11 @@
"secrets": {
"flake": false,
"locked": {
"lastModified": 1708383844,
"narHash": "sha256-cl5HngHhGW6qkvjv9ZSaiQuZKXfxlDfM4IDVPyMRBcY=",
"lastModified": 1708379923,
"narHash": "sha256-3V7lwL+GQIi3os9jDetzl5Y1+Rgs2ES5kwjHzG9HteU=",
"ref": "refs/heads/main",
"rev": "31ef63532cf9907e8580741f1c9428b4176874cf",
"revCount": 8,
"rev": "90dd2143e21ba1442b054c47a09d5a15229cf5f7",
"revCount": 6,
"type": "git",
"url": "http://git.everest.sable-pancake.ts.net/Toast/nix-secrets"
},

View file

@ -1,12 +1,8 @@
{ config, flakeSelf, ... }:
let
hostSecrets = "${flakeSelf.inputs.secrets}/" + config.networking.hostName;
in
{ config, ... }:
{
# Set up secrets
age.secrets = { ddclient-passwd.file = hostSecrets + "/ddclient-password.age"; };
age.secrets = { ddclient-passwd.file = ../../secrets/ddclient-passwd; };
services.ddclient = {
enable = true;

BIN
secrets/ddclient-passwd Normal file

Binary file not shown.

10
secrets/secrets.nix Executable file
View file

@ -0,0 +1,10 @@
let
everest = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBYENWORu3M32NIIip8gZO5VbCUBwsT2RgOU8ATsASpc root@Everest";
bootsrtrap = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMKloSXSeF4dNXebd93uMuiFuXRHfxo/he4+O9SFTz1s bootstrap key";
in
{
"ddclient-passwd".publicKeys = [ everest ];
"cock".publicKeys = [ everest ];
"syncthing/key".publicKeys = [ everest ];
"syncthing/cert".publicKeys = [ everest ];
}