From 797c55d7eba5fbbf9c37bd0522fe021ec8255c1e Mon Sep 17 00:00:00 2001 From: ulic-youthlic Date: Mon, 20 Jan 2025 00:03:53 +0800 Subject: [PATCH] add sops secrets for Akun --- home/david/configurations/Akun/default.nix | 18 +++++++++++++++++- nixos/configurations/Akun/default.nix | 2 +- 2 files changed, 18 insertions(+), 2 deletions(-) diff --git a/home/david/configurations/Akun/default.nix b/home/david/configurations/Akun/default.nix index 945517c..410a9a9 100644 --- a/home/david/configurations/Akun/default.nix +++ b/home/david/configurations/Akun/default.nix @@ -2,6 +2,7 @@ pkgs, unixName, config, + rootPath, ... }: { @@ -100,7 +101,7 @@ }; }; }; - # includes = [ config.sops.secrets.ssh-config.path ]; + includes = [ config.sops.secrets.ssh-config.path ]; }; programs.chromium = { enable = true; @@ -110,4 +111,19 @@ "--enable-features=UseOzonePlatform" ]; }; + sops.secrets = { + "ssh-private-key/tytonidae" = { + mode = "0600"; + path = "${config.home.homeDirectory}/.ssh/id_ed25519_tytonidae"; + }; + "ssh-private-key/akun" = { + mode = "0600"; + path = "${config.home.homeDirectory}/.ssh/id_ed25519_akun"; + }; + "ssh-config" = { + mode = "0400"; + format = "yaml"; + sopsFile = rootPath + "/secrets/ssh-config.yaml"; + }; + }; } diff --git a/nixos/configurations/Akun/default.nix b/nixos/configurations/Akun/default.nix index 6fb58cc..87a16b1 100644 --- a/nixos/configurations/Akun/default.nix +++ b/nixos/configurations/Akun/default.nix @@ -16,7 +16,7 @@ }; i18n.enable = true; programs = { - # dae.enable = true; + dae.enable = true; openssh.enable = true; kanata.enable = true; };