kylekrein/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Sops based on ssh keys

Browse source
This commit is contained in:
Aleksandr Lebedev 2025-07-30 18:51:51 +02:00
parent ec740591b3
commit 1b6310a742
16 changed files with 115 additions and 78 deletions
Download patch file Download diff file Expand all files Collapse all files

1
nixos/hosts/andrej-pc/configuration.nix
View file

@ -295,7 +295,6 @@
settings.PasswordAuthentication = false;
settings.KbdInteractiveAuthentication = false;
settings.PermitRootLogin = "no";
#extraConfig = "HostKey ${config.sops.secrets."ssh_keys/${hwconfig.hostname}".path}";
};
# Open ports in the firewall.

1
nixos/hosts/andrej-pc/default.nix
View file

@ -31,6 +31,5 @@
hardware.nvidia.open = lib.mkForce false;
#hardware.nvidia.package = lib.mkForce config.boot.kernelPackages.nvidiaPackages.latest;
#sops.secrets."ssh_keys/${hwconfig.hostname}" = {};
systemd.network.wait-online.enable = lib.mkForce false;
}

4
nixos/hosts/kylekrein-framework12/default.nix
View file

@ -23,7 +23,9 @@
./hibernation.nix
];
sops.secrets."ssh_keys/${hwconfig.hostname}" = {};
boot.kernelPackages = lib.mkForce pkgs.linuxPackages_cachyos;
services.scx.enable = true; # by default uses scx_rustland scheduler
services.fwupd.enable = true; #fwupdmgr update
nixpkgs.overlays = [
# Fixes java crash because of bind mount with impermanence when loading too many mods(ex. All The Mods 9)

1
nixos/hosts/kylekrein-homepc/default.nix
View file

@ -23,7 +23,6 @@
boot.kernelPackages = lib.mkForce pkgs.linuxPackages_cachyos;
services.scx.enable = true; # by default uses scx_rustland scheduler
sops.secrets."ssh_keys/${hwconfig.hostname}" = {};
nixpkgs.overlays = [
# Fixes java crash because of bind mount with impermanence when loading too many mods(ex. All The Mods 9)
(self: super: {

1
nixos/hosts/kylekrein-mac/default.nix
View file

@ -16,7 +16,6 @@
../../users/kylekrein
];
sops.secrets."ssh_keys/${hwconfig.hostname}" = {};
facter.reportPath = lib.mkForce null; #fails to generate
boot.binfmt.emulatedSystems = ["x86_64-linux"];
nix.settings.extra-platforms = config.boot.binfmt.emulatedSystems;

2
nixos/hosts/kylekrein-server/default.nix
View file

@ -25,7 +25,6 @@
config = {
home-manager.users = lib.mkForce {};
stylix.image = ../../modules/hyprland/wallpaper.jpg;
#sops.secrets."ssh_keys/${hwconfig.hostname}" = {};
boot.tmp.cleanOnBoot = true;
boot.loader.grub.enable = true;
boot.loader.grub.device = "/dev/sda";
@ -56,7 +55,6 @@
settings.PasswordAuthentication = false;
settings.KbdInteractiveAuthentication = false;
settings.PermitRootLogin = "no";
#extraConfig = "HostKey ${config.sops.secrets."ssh_keys/${hwconfig.hostname}".path}";
};
zramSwap = {