wurzel/fruitbasket
9
1
Fork 0
Code Issues 5 Pull requests Packages Projects Releases Wiki Activity

configured sops

Browse source
This commit is contained in:
revol-xut 2022-08-16 15:40:59 +02:00
parent 6525c45ca2
commit 806a5078ca
No known key found for this signature in database
GPG key ID: 4F56FF7759627D07
3 changed files with 13 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
flake.nix
View file

@ -3,7 +3,6 @@
nixpkgs.url = github:NixOS/nixpkgs/nixos-22.05; nixpkgs.url = github:NixOS/nixpkgs/nixos-22.05;
sops-nix.url = github:Mic92/sops-nix; sops-nix.url = github:Mic92/sops-nix;
sops-nix.inputs.nixpkgs.follows = "nixpkgs"; sops-nix.inputs.nixpkgs.follows = "nixpkgs";
fsr-infoscreen.url = github:fsr/infoscreen; fsr-infoscreen.url = github:fsr/infoscreen;
}; };
outputs = { self, nixpkgs, sops-nix, fsr-infoscreen, ... }@inputs: outputs = { self, nixpkgs, sops-nix, fsr-infoscreen, ... }@inputs:
@ -55,8 +54,14 @@
durian = nixpkgs.lib.nixosSystem { durian = nixpkgs.lib.nixosSystem {
system = "x86_64-linux"; system = "x86_64-linux";
modules = [ modules = [
inputs.sops-nix.nixosModules.sops
./hosts/durian/configuration.nix ./hosts/durian/configuration.nix
./modules/base.nix ./modules/base.nix
./modules/sops.nix
./modules/keycloak.nix
{
sops.defaultSopsFile = ./secrets/durian.yaml;
}
]; ];
}; };
}; };

4
modules/keycloak.nix
View file

@ -1,4 +1,4 @@
{pkgs, conifg, lib}: { {pkgs, config, lib, ...}: {
sops.secrets.postgres_keycloak.owner = config.systemd.services.keycloak.serviceConfig.User; sops.secrets.postgres_keycloak.owner = config.systemd.services.keycloak.serviceConfig.User;
@ -13,7 +13,7 @@
database = { database = {
username = "keycloak"; username = "keycloak";
type = "postgresql"; type = "postgresql";
passwordFile = ; passwordFile = config.sops.secrets.postgres_keycloak.path;
name = "keycloak"; name = "keycloak";
host = "localhost"; host = "localhost";
}; };

5
modules/sops.nix Normal file
View file

@ -0,0 +1,5 @@
{ config, lib, pkgs, ... }:
{
sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
sops.age.generateKey = false;
}