secrets: add default
This commit is contained in:
parent
d04983183b
commit
ac112d6c21
4
2configs/secrets/default.nix
Normal file
4
2configs/secrets/default.nix
Normal file
|
@ -0,0 +1,4 @@
|
|||
{
|
||||
sops.defaultSopsFile = ../../secrets/common.yaml;
|
||||
sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
|
||||
}
|
|
@ -1,12 +1,12 @@
|
|||
{ config, ... }:
|
||||
{
|
||||
sops.defaultSopsFile = ../../secrets/common.yaml;
|
||||
sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
|
||||
imports = [ ./default.nix ];
|
||||
|
||||
sops.secrets = {
|
||||
"passwd/makefu".neededForUsers = true;
|
||||
"passwd/root".neededForUsers = true;
|
||||
};
|
||||
|
||||
users.users = {
|
||||
makefu.passwordFile = config.sops.secrets."passwd/makefu".path;
|
||||
root.passwordFile = config.sops.secrets."passwd/root".path;
|
||||
|
|
Loading…
Reference in a new issue