blake/nix
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

adding vpns

Browse Source
This commit is contained in:
blake
2025-10-07 18:16:46 -05:00
parent b97339978f
commit 7932e852c9
2 changed files with 5 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
modules/system/sops.nix
View File

@@ -17,23 +17,6 @@ in
defaultSopsFormat = "yaml"; defaultSopsFormat = "yaml";
age.keyFile = "/home/blake/.config/sops/age/keys.txt"; age.keyFile = "/home/blake/.config/sops/age/keys.txt";
secrets = {
# define secrets with the following syntax
# secret path is the nesting of headings in the yaml file
# the secret is auto place in /run/<path to secret> path allows you to symlink to the /run to where ever is needed
# "<secret_name/path>" = {
# owner = "<user>";
# group = "<group>";
# path = "<path on system to place flile>"
# };
"tailscale_authkey" = lib.mkIf config.modules.system.tailscale.enable {
owner = "root";
};
"borg_passwd" = lib.mkIf config.modules.system.backups.enable {
owner = "root";
group = "root";
};
"blake_passwd" = lib.mkIf config.users.blake.enable { "blake_passwd" = lib.mkIf config.users.blake.enable {
owner = "root"; owner = "root";

5
modules/system/tailscale.nix
View File

@@ -15,5 +15,10 @@ in
useRoutingFeatures = "both"; useRoutingFeatures = "both";
authKeyFile = authkey_file; authKeyFile = authkey_file;
}; };
# declare authkey secrets
sops.secrets = {
"tailscale_authkey" = {
owner = "root";
};
}; };
} }