1e2e2bdd35
grep -- '- &' .sops.yaml | cut -d'&' -f2 | grep _host | sed 's/_host//' | xargs -n2 clan secrets machines add
for i in secrets/*.yaml; do host=$(basename $i .yaml); clan secrets import-sops $i --machine $host --user makefu --prefix ${host}-;done
for i in secrets/*.yaml; do host=$(basename $i .yaml) ;clan secrets groups add-machine common "$host";done
23 lines
624 B
Nix
23 lines
624 B
Nix
{ config, pkgs, lib, ... }:
|
|
# nix-shell -p wol --run 'wol C8:CB:B8:CF:E4:DC --passwd=CA-FE-BA-BE-13-37'
|
|
let
|
|
itf = config.makefu.server.primary-itf;
|
|
in {
|
|
imports =
|
|
[ # Include the results of the hardware scan.
|
|
./hw.nix
|
|
../../2configs
|
|
../../2configs/home-manager
|
|
../../2configs/fs/single-partition-ext4.nix
|
|
../../2configs/smart-monitor.nix
|
|
../../2configs/tinc/retiolum.nix
|
|
../../2configs/filepimp-share.nix
|
|
];
|
|
|
|
krebs.build.host = config.krebs.hosts.filepimp;
|
|
|
|
networking.firewall.trustedInterfaces = [ itf ];
|
|
networking.interfaces.${itf}.wakeOnLan.enable = true;
|
|
|
|
}
|