Use agenix for initial user credential
This commit is contained in:
parent
a1f59f6507
commit
55c1521df0
25
flake.nix
25
flake.nix
@ -98,27 +98,26 @@
|
|||||||
users = {
|
users = {
|
||||||
sezycei = {
|
sezycei = {
|
||||||
isNormalUser = true;
|
isNormalUser = true;
|
||||||
initialPassword = "bootMaster";
|
passwordFile = config.age.secrets.sezycei.path;
|
||||||
extraGroups = [ "wheel" ];
|
extraGroups = [ "wheel" ];
|
||||||
packages = with pkgs; [ byobu tmux stack ];
|
packages = with pkgs; [
|
||||||
|
byobu
|
||||||
|
tmux
|
||||||
|
stack
|
||||||
|
];
|
||||||
};
|
};
|
||||||
torrent = {
|
torrent = {
|
||||||
isNormalUser = true;
|
isNormalUser = true;
|
||||||
initialPassword = "torrentUserTemp";
|
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
};
|
};
|
||||||
|
|
||||||
age.secrets.keys.file = ./secrets/keys.age;
|
age = {
|
||||||
|
secrets = {
|
||||||
#sops = {
|
keys.file = ./secrets/keys.age;
|
||||||
# age = { sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ]; };
|
sezycei.file = ./secrets/sezycei.age;
|
||||||
# defaultSopsFile = ./secrets/keys.yaml;
|
};
|
||||||
# secrets = {
|
};
|
||||||
# hostname = { };
|
|
||||||
# };
|
|
||||||
#};
|
|
||||||
|
|
||||||
system.stateVersion = "22.11";
|
system.stateVersion = "22.11";
|
||||||
})
|
})
|
||||||
|
@ -1,7 +1,9 @@
|
|||||||
let
|
let
|
||||||
james = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID7R6FstqVDjVuyKGEUmWolYJ/I/DDxYOQV/zKPkiAth james@eversole.co";
|
james = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID7R6FstqVDjVuyKGEUmWolYJ/I/DDxYOQV/zKPkiAth james@eversole.co";
|
||||||
eve-psr-nix0 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMyaPYK0HcKAjrD1g+FPqPEU9FJ0I6+iKYmQlWKE0zHp root@matri.cx";
|
eve-psr-nix0 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMyaPYK0HcKAjrD1g+FPqPEU9FJ0I6+iKYmQlWKE0zHp root@matri.cx";
|
||||||
|
all = [ james eve-psr-nix0 ];
|
||||||
in
|
in
|
||||||
{
|
{
|
||||||
"secrets/keys.age".publicKeys = [ james eve-psr-nix0 ];
|
"secrets/keys.age".publicKeys = all;
|
||||||
|
"secrets/sezycei.age".publicKeys = all;
|
||||||
}
|
}
|
||||||
|
9
secrets/sezycei.age
Normal file
9
secrets/sezycei.age
Normal file
@ -0,0 +1,9 @@
|
|||||||
|
age-encryption.org/v1
|
||||||
|
-> ssh-ed25519 dQ70Fw 3IuGJg1Bmbdhx4+4WV+EaEpQ0795MDG2QKHnQA02M0Q
|
||||||
|
qQgBpM1lKO3LCogVfDpN+EoCjYN6xsAezcoEOR/RsXw
|
||||||
|
-> ssh-ed25519 ZIoeGg vF5+NjxMu0PjaRpTHYEQ8yodaV4JB7kVby8q9e53S3A
|
||||||
|
fnloGnvaQrBtJ+JTTczxqikpbhG2RrDNTTAyCgnTkLo
|
||||||
|
-> 46"=M-grease )Ek`P B?bmJPNj B^(u_8 TrBLv
|
||||||
|
6JtU+tKd6pFfvzg5svdM
|
||||||
|
--- PiP0DrBQUbngSItXfNh1FJVNFUXKlnVnN7nASKntfFg
|
||||||
|
.´™g‡<67>K…í‘-þT¸ôküˆ&Š<>×>[Qû<51>ì€Å\‘Ž Ö©k¢
|
Loading…
x
Reference in New Issue
Block a user