pim/nixos-configs
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity

deploy work ssh keys using homenix

Browse source 
closes #16
This commit is contained in:
Pim Kunis 2023-10-16 10:59:27 +02:00
parent b3e8280f4e
commit 1da1b8422b
6 changed files with 25 additions and 16 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
configuration.nix
View file

@ -42,7 +42,7 @@ in
btop btop
ripgrep ripgrep
vim vim
dnsdog dogdns
tree tree
]; ];
gnome.excludePackages = with pkgs; [ gnome.totem gnome-tour gnome.epiphany gnome.geary gnome-console ]; gnome.excludePackages = with pkgs; [ gnome.totem gnome-tour gnome.epiphany gnome.geary gnome-console ];
@ -77,8 +77,7 @@ in
age.secrets.wg-quick-home-privkey.file = ./secrets/wg-quick-home-privkey.age; age.secrets.wg-quick-home-privkey.file = ./secrets/wg-quick-home-privkey.age;
age.secrets.wg-quick-home-preshared-key.file = ./secrets/wg-quick-home-preshared-key.age; age.secrets.wg-quick-home-preshared-key.file = ./secrets/wg-quick-home-preshared-key.age;
age.identityPaths = [ "/home/pim/.ssh/id_ed25519" ]; age.identityPaths = [ "/home/pim/.ssh/age_ed25519" ];
networking.wg-quick = { networking.wg-quick = {
interfaces.home = { interfaces.home = {

24
home/home.nix
View file

@ -1,4 +1,4 @@
{ pkgs, ... }: { pkgs, config, ... }:
{ {
imports = [ imports = [
@ -45,12 +45,18 @@
xdg.userDirs.enable = true; xdg.userDirs.enable = true;
# homeage = { homeage = {
# identityPaths = [ "/home/pim/Downloads/rage/homeage-test/identity.txt" ]; identityPaths = [ "/home/pim/.ssh/age_ed25519" ];
# installationType = "systemd"; installationType = "systemd";
# file."helloworld" = {
# source = ./homeage-test/source.txt.age; file."sue_ed25519" = {
# symlinks = [ "/home/pim/Downloads/rage/homeage-test/result2.txt" ]; source = ../secrets/sue_ed25519.age;
# }; symlinks = [ "${config.home.homeDirectory}/.ssh/sue_ed25519" ];
# }; };
file."sue_azure_rsa" = {
source = ../secrets/sue_azure_rsa.age;
symlinks = [ "${config.home.homeDirectory}/.ssh/sue_azure_rsa" ];
};
};
} }

2
home/ssh/default.nix
View file

@ -9,7 +9,7 @@
matchBlocks = { matchBlocks = {
gitlab-sue = lib.hm.dag.entryBefore [ "*" ] { gitlab-sue = lib.hm.dag.entryBefore [ "*" ] {
hostname = "gitlab.com"; hostname = "gitlab.com";
identityFile = "~/.ssh/sue/id_ed25519"; identityFile = "~/.ssh/sue_ed25519";
identitiesOnly = true; identitiesOnly = true;
}; };
github = lib.hm.dag.entryBefore [ "*" ] { github = lib.hm.dag.entryBefore [ "*" ] {

10
secrets/secrets.nix
View file

@ -1,7 +1,11 @@
let let
pim = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILTxn6fDUyEOWhuapt5GptYPZay+3tNH+UeY7aq8KSbh pim@x260"; publicKeys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILTxn6fDUyEOWhuapt5GptYPZay+3tNH+UeY7aq8KSbh pim@x260"
];
in in
{ {
"wg-quick-home-privkey.age".publicKeys = [ pim ]; "wg-quick-home-privkey.age".publicKeys = publicKeys;
"wg-quick-home-preshared-key.age".publicKeys = [ pim ]; "wg-quick-home-preshared-key.age".publicKeys = publicKeys;
"sue_ed25519.age".publicKeys = publicKeys;
"sue_azure_rsa.age".publicKeys = publicKeys;
} }

BIN
secrets/sue_azure_rsa.age Normal file
View file

Binary file not shown.

BIN
secrets/sue_ed25519.age Normal file
View file

Binary file not shown.