Allow backblaze secrets to be accessed by lime
This commit is contained in:
parent
3cef5b6f97
commit
03369e88a8
5 changed files with 14 additions and 35 deletions
Binary file not shown.
|
@ -2,10 +2,15 @@ let strawberry = [
|
|||
(builtins.readFile ./system/strawberry/keys/riley.pub)
|
||||
(builtins.readFile ./system/strawberry/keys/root.pub)
|
||||
];
|
||||
lime = [
|
||||
(builtins.readFile ./system/lime/keys/riley.pub)
|
||||
(builtins.readFile ./system/lime/keys/root.pub)
|
||||
];
|
||||
dev-lt-63 = [
|
||||
(builtins.readFile ./system/dev-lt-63/keys/riley.pub)
|
||||
];
|
||||
all = strawberry ++ lime ++ dev-lt-63;
|
||||
in {
|
||||
# Secrets for backup cloud storage provider
|
||||
"secret/backblaze.age".publicKeys = strawberry ++ dev-lt-63;
|
||||
"secret/backblaze.age".publicKeys = all;
|
||||
}
|
|
@ -1,33 +0,0 @@
|
|||
# Edit this configuration file to define what should be installed on
|
||||
# your system. Help is available in the configuration.nix(5) man page
|
||||
# and in the NixOS manual (accessible by running ‘nixos-help’).
|
||||
|
||||
{ config, pkgs, ... }:
|
||||
|
||||
{
|
||||
imports =
|
||||
[ # Include the results of the hardware scan.
|
||||
./hardware-configuration.nix
|
||||
];
|
||||
|
||||
# Use the systemd-boot EFI boot loader.
|
||||
# services.xserver.enable = true;
|
||||
# services.xserver.desktopManager.lxqt.enable = true;
|
||||
# services.xserver.displayManager.gdm.enable = true;
|
||||
programs.firefox.enable = true;
|
||||
|
||||
networking.hostName = "lime";
|
||||
networking.networkmanager.enable = true; # Easiest to use and most distros use this by default.
|
||||
|
||||
# Set your time zone.
|
||||
time.timeZone = "Europe/Amsterdam";
|
||||
|
||||
|
||||
# Enable touchpad support (enabled default in most desktopManager).
|
||||
services.xserver.libinput.enable = true;
|
||||
|
||||
system.stateVersion = "22.11"; # Did you read the comment?
|
||||
|
||||
programs.git.enable = true;
|
||||
nix.settings.experimental-features = ["nix-command" "flakes"];
|
||||
}
|
|
@ -1,12 +1,18 @@
|
|||
{ lib, modulesPath, ... }: {
|
||||
|
||||
imports = [./hardware-configuration.nix ./configuration.nix];
|
||||
imports = [./hardware-configuration.nix];
|
||||
|
||||
custom = {
|
||||
gui.enable = true;
|
||||
backups.enable = true;
|
||||
};
|
||||
|
||||
networking.hostName = "lime";
|
||||
networking.networkmanager.enable = true;
|
||||
|
||||
system.stateVersion = "22.11";
|
||||
services.xserver.libinput.enable = true;
|
||||
|
||||
home-manager.users."riley".home.stateVersion = "22.11";
|
||||
|
||||
}
|
||||
|
|
1
system/lime/keys/root.pub
Normal file
1
system/lime/keys/root.pub
Normal file
|
@ -0,0 +1 @@
|
|||
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOF9N5hsJEdm/jBxAGjQdQg7s/EFheZJK3KHyNkt5uFc root@lime
|
Loading…
Reference in a new issue