aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorLinnea Gräf <nea@nea.moe>2025-05-21 21:59:07 +0200
committerLinnea Gräf <nea@nea.moe>2025-05-21 21:59:07 +0200
commit4506c462e3ae6519e8bfa9fac8a1aa85d1b32602 (patch)
treec2b7d00cdfd44852a85a470ffaca6134e273e53f
parentf1bd357ec41b9ca547c87577d2a54b0c8c796fb5 (diff)
downloadnix-infra-4506c462e3ae6519e8bfa9fac8a1aa85d1b32602.tar.gz
nix-infra-4506c462e3ae6519e8bfa9fac8a1aa85d1b32602.tar.bz2
nix-infra-4506c462e3ae6519e8bfa9fac8a1aa85d1b32602.zip
snapshot: Mi 21. Mai 21:59:07 CEST 2025
-rw-r--r--modules/desktop/zerotierone/default.nix4
-rw-r--r--secrets/secret1.agebin0 -> 238 bytes
-rw-r--r--secrets/secrets.nix9
-rw-r--r--srv/hadante/agenix.nix7
4 files changed, 17 insertions, 3 deletions
diff --git a/modules/desktop/zerotierone/default.nix b/modules/desktop/zerotierone/default.nix
index e8e834b..62f4085 100644
--- a/modules/desktop/zerotierone/default.nix
+++ b/modules/desktop/zerotierone/default.nix
@@ -8,8 +8,6 @@
{
services.zerotierone = {
enable = true;
- joinNetworks = [
- "363c67c55a720f73"
- ];
+ joinNetworks = import config.age.secrets.secret1.path;
};
}
diff --git a/secrets/secret1.age b/secrets/secret1.age
new file mode 100644
index 0000000..d77c00c
--- /dev/null
+++ b/secrets/secret1.age
Binary files differ
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
new file mode 100644
index 0000000..4701609
--- /dev/null
+++ b/secrets/secrets.nix
@@ -0,0 +1,9 @@
+let
+ nea = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINg2WYMRKINwbH5UCqqK2qq/qW0gG1NnaALHqEyU4NzM";
+ users = [ nea ];
+ systems = [ ];
+ all = users ++ systems;
+in
+{
+ "secret1.age".publicKeys = all;
+}
diff --git a/srv/hadante/agenix.nix b/srv/hadante/agenix.nix
index 936a896..9aedf0f 100644
--- a/srv/hadante/agenix.nix
+++ b/srv/hadante/agenix.nix
@@ -11,4 +11,11 @@
inputs.agenix.overlays.default
];
environment.systemPackages = [ pkgs.agenix ];
+ age = {
+ secrets = {
+ secret1.file = ../../secrets/secret1.age;
+ };
+ identityPaths = [ "/home/nea/.ssh/id_ed25519" ];
+
+ };
}