Crypto Change
luks for xps ssh via ssh sops via age gpg backbone, but not removed gpg-agent removed
This commit is contained in:
@@ -1,22 +1,18 @@
|
||||
{ pkgs, ... }@all: with all;
|
||||
{
|
||||
imports = [
|
||||
inputs.sops-nix.homeManagerModules.sops
|
||||
];
|
||||
|
||||
{ pkgs, ... }@all: with all; {
|
||||
imports = [ inputs.sops-nix.homeManagerModules.sops ];
|
||||
sops = {
|
||||
age.keyFile = "${hyper.home}.age_nx2_key_13.txt";
|
||||
age.keyFile = if (hyper.host == "NxXPS") then
|
||||
"${hyper.home}/vault/age/sops-xps-home.key"
|
||||
else if (hyper.host == "NxACE") then
|
||||
"${hyper.home}/.age_nx2_key_13.txt"
|
||||
else if (hyper.host == "NxNORTH") then
|
||||
"${hyper.home}/.age_nx2_key_13.txt"
|
||||
else "unkown host in sops.nix";
|
||||
defaultSopsFile = ../sops-secrets.yaml;
|
||||
|
||||
# %r is $XDG_RUNTIME_DIR
|
||||
secrets = {
|
||||
"example" = {
|
||||
path = "%r/secrets/example";
|
||||
};
|
||||
# "sops-age-private-key" = { # Bootstrapping doens't work
|
||||
# mode = "0400";
|
||||
# path = "/home/${user}/.config/sops/age/keys.txt";
|
||||
# };
|
||||
};
|
||||
};
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user