Raphaël Numbus
20 lines
750 B
Nix
20 lines
750 B
Nix
{ modulesPath, config, pkgs, inputs, ... }:
|
|
|
|
{
|
|
imports = [
|
|
(modulesPath + "/installer/scan/not-detected.nix")
|
|
(modulesPath + "/profiles/qemu-guest.nix")
|
|
inputs.sops-nix.nixosModules.sops
|
|
];
|
|
|
|
# System
|
|
system.stateVersion = "25.11";
|
|
|
|
# Secrets management
|
|
sops.defaultSopsFile = ./secrets/secrets.yaml;
|
|
sops.age.sshKeyPaths = [ "/home/numbus-admin/.ssh/id_ed25519" ];
|
|
sops.age.keyFile = "/var/lib/sops-nix/key.txt";
|
|
# Secrets
|
|
sops.secrets."authorizedSshPublicKeys" = { owner = "numbus-admin"; path = "/home/numbus-admin/.ssh/authorized_keys"; mode = "0600"; };
|
|
sops.secrets."smtpPassword" = { owner = "numbus-admin"; mode = "0600"; };
|
|
sops.secrets."cloudflareDnsApiToken" = { owner = "numbus-admin"; mode = "0600"; }; |