This commit is contained in:
sadan 2024-05-27 22:37:25 -04:00
parent 3033274674
commit 2fc3e68688
No known key found for this signature in database
5 changed files with 89 additions and 40 deletions

View file

@ -15,6 +15,9 @@ let
in in
{ {
imports = [
inputs.sops-nix.homeManagerModules.sops
]
programs.zsh.enable = true; programs.zsh.enable = true;
programs.zsh.oh-my-zsh.enable = true; programs.zsh.oh-my-zsh.enable = true;
programs.zsh.initExtra = builtins.trace _z1 _z1; programs.zsh.initExtra = builtins.trace _z1 _z1;

View file

@ -1,6 +1,7 @@
{ config, lib, pkgs, inputs, ... }: { config, lib, pkgs, inputs, ... }:
let let
_s1 = import ../../common/sops.nix {inherit configl; };
files = import ../../common/files.nix { inherit config; }; files = import ../../common/files.nix { inherit config; };
shell = import ../../common/shell.nix { inherit config pkgs; }; shell = import ../../common/shell.nix { inherit config pkgs; };
p = import ../../common/pkgs.nix { inherit pkgs config; }; p = import ../../common/pkgs.nix { inherit pkgs config; };
@ -15,6 +16,10 @@ let
in in
{ {
imports = [
inputs.sops-nix.homeManagerModules.sops
];
sops = _s1;
programs.zsh.enable = true; programs.zsh.enable = true;
programs.zsh.oh-my-zsh.enable = true; programs.zsh.oh-my-zsh.enable = true;
programs.zsh.initExtra = builtins.trace _z1 _z1; programs.zsh.initExtra = builtins.trace _z1 _z1;

View file

@ -1,46 +1,49 @@
{ config }: rec{ { config }: rec{
kitty = { kitty = {
recursive = true; recursive = true;
source = ../dotfiles/kitty; source = ../dotfiles/kitty;
target = "./.config/kitty"; target = "./.config/kitty";
}; };
eslint_d_config = { eslint_d_config = {
source = ../dotfiles/eslintrc.json; source = ../dotfiles/eslintrc.json;
target = "./.config/.eslintrc.json"; target = "./.config/.eslintrc.json";
}; };
gh = { gh = {
recursive = true; source = ../dotfiles/gh/config.yml;
source = ../dotfiles/gh; target = "./.config/gh/config.yml";
target = "./.config/gh"; };
}; gh_auth = {
btop = { source = config.sops.hosts.path;
recursive = true; target = "./.config/gh/hosts.yml"
source = ../dotfiles/btop; }
target = "./.config/btop"; btop = {
}; recursive = true;
nvim = { source = ../dotfiles/btop;
recursive = true; target = "./.config/btop";
source = config.lib.file.mkOutOfStoreSymlink "${config.home.homeDirectory}/nixos/dotfiles/nvim"; };
target = "./.config/nvim"; nvim = {
}; recursive = true;
p10k = { source = config.lib.file.mkOutOfStoreSymlink "${config.home.homeDirectory}/nixos/dotfiles/nvim";
recursive = true; target = "./.config/nvim";
source = ../dotfiles/.p10k.zsh; };
target = ".p10k.zsh"; p10k = {
}; recursive = true;
rofi = { source = ../dotfiles/.p10k.zsh;
target = ".p10k.zsh";
};
rofi = {
recursive = true; recursive = true;
source = ../dotfiles/rofi; source = ../dotfiles/rofi;
target = "./.config/rofi"; target = "./.config/rofi";
}; };
# # Building this configuration will create a copy of 'dotfiles/screenrc' in # # Building this configuration will create a copy of 'dotfiles/screenrc' in
# # the Nix store. Activating the configuration will then make '~/.screenrc' a # # the Nix store. Activating the configuration will then make '~/.screenrc' a
# # symlink to the Nix store copy. # # symlink to the Nix store copy.
# ".screenrc".source = dotfiles/screenrc; # ".screenrc".source = dotfiles/screenrc;
# # You can also set the file content immediately. # # You can also set the file content immediately.
# ".gradle/gradle.properties".text = '' # ".gradle/gradle.properties".text = ''
# org.gradle.console=verbose # org.gradle.console=verbose
# org.gradle.daemon.idletimeout=3600000 # org.gradle.daemon.idletimeout=3600000
# ''; # '';
} }

10
common/sops.nix Normal file
View file

@ -0,0 +1,10 @@
{ config }:
{
age.keyFile = "/home${config.home.username}/.config/sops/age/keys.txt";
defaultSopsFile = ../../secrets.yaml;
secrets.hosts = {
format = "binary";
sopsFile = ../../secrets/hosts;
owner = "${config.home.username}"
};
}

28
secrets/hosts Normal file
View file

@ -0,0 +1,28 @@
{
"data": "ENC[AES256_GCM,data:90aRKN1foxr77gsPKWqjlk0GU0QnQIPdHNyfdUhjp5Ws7+5QoR0QHSLfWKM9iFU9Ee5UZrSX2z24hY7pbTMOubRf5zQmNEK+phT98m8PqHxrdxctRSHKgklLdAiGH03yM41ZsCoRpMW3nnHbJh6UhyHiwxMTGJg/2XlueEVYlh1vla0hsaFlw3XF2mEzcGNO9HghfthGg0XMsDm7qriyhd2VjWfI/DbFqQDvr2YMsC1mTYcorL5bo0dkjOZ1pR6rQA==,iv:8ntUEwOB9m+OxfKY2/oOqjS3YkcEirJgaD7ropcQzTU=,tag:cgN+e7OGVtvwC8mDBy2YJw==,type:str]",
"sops": {
"kms": null,
"gcp_kms": null,
"azure_kv": null,
"hc_vault": null,
"age": [
{
"recipient": "age1xsuyaeehzv4ar4f6xpc6tfp9pttzjf7qdyl3x2tj42vjc8szlqpq834e3d",
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqWGczdExuSk10K2x6Qkhv\ndlhqeGwrMjJUdTRYUjNvcmMvVjZBanE5bFhvCnIxdy9OWEZ5YVZ1b1JPaEVoRjlQ\nS2tTekdZVk1XV2o0TmdwbXFvTTU0QmcKLS0tIHEyUldoaUNXV0xuTjlqd3FiaC81\nT002TGZuOUFYOWtJNHQ5VEZxRGdGZ1EKfn6ogFhUJTPOWa9pwTrQDBly1A30JppY\n164UbgNlIx+muZqkm3l+RMUx41hzIA8JwdW/yDlhFM8pl9tR3y10FQ==\n-----END AGE ENCRYPTED FILE-----\n"
},
{
"recipient": "age1tq8zaaqe8t4u2jgyf7usngtzyql0ymyxq6hntmu04vt5ypwhxensmzynhl",
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrN002bTJUcmt2TVNXR1Vu\nOElRLzdpdGU0c1daTjlEZlpXbXlnYTNNQ3hVCjdKcWR4UndSdUF3YnA0a1RKUy9m\ncEEyT3p4K3orNGhOT0RBa00yQS8vSW8KLS0tIElQMXdQMXdEelFPSlU3NENubVZE\nOTI5bmFFK0xUS0ZEMWtUZDloQTdOVFUKbgTzgiNPT+QXLXjNlBGK/XQFx9Ox8Bos\nTLUkJ23rsk+LMPWSO4Flpv+5ce/G2YQFV6SXlpFSYlNJlSxU2mZtWw==\n-----END AGE ENCRYPTED FILE-----\n"
},
{
"recipient": "age1cz006hex596lmj88kkhrkvq89luqk59hxuq83q4kvhz82ltwpe4ss8gm3t",
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGRy9UZjRCaGlOUjVtTnZI\nV3VtdWwwbzQxaDhIVUN3cVF5OEUyVm8reUF3Cjh6bFVDY3ZZUWVvQ1h0QTFEU08r\nZ2tJN3ZrVisyQmpIcnoxZGdjcWcwbDAKLS0tIGNlbTc1QUJiWHU5bnhJKzRYTDVJ\nR1lrWlVmSkJJS2dZQlFTRWloN05mK2MKGVyjmdWFtCfR0AlnH8SaDdtHXlGsVleG\nRkHDFvAN2Y62S45w5l9d66J5WykSCmgQB2TNuzlYKNAsCwTbzaBBDg==\n-----END AGE ENCRYPTED FILE-----\n"
}
],
"lastmodified": "2024-05-28T02:14:52Z",
"mac": "ENC[AES256_GCM,data:B/Jj1zszWdqX1xAABaKg/j39CwQtTXh5fh43eT1vMCk/spHXJhhZc6kdIP1Ll0xGXQobxF/fRtL5EVz2/3qz8Hi/XfTXeNZRIq4d6mhuL5SoSJfgo9NynaLu9of4zYpWJobIWFAnv/wZRq9swKUEypkGvqBzx/CmSvOsxw6EMWQ=,iv:NPFEhI6Z2rFz1cXRacj91NIdi07S/lyRyEIsVfloZpQ=,tag:Q7vEyQh933/HO3bowqKfZA==,type:str]",
"pgp": null,
"unencrypted_suffix": "_unencrypted",
"version": "3.8.1"
}
}