+4

hosts/polecat/configuration.nix

reviewed

··· 2 2 modulesPath, 3 3 lib, 4 4 pkgs, 5 5 + config, 5 6 ... 6 7 }: 7 8 { ··· 9 10 ./hardware-configuration.nix 10 11 ../../modules/nixos/common/i18n.nix 11 12 ]; 13 13 + 14 14 + age.secrets."passwd".file = ../../secrets/common/passwd.age; 12 15 13 16 # Bootloader 14 17 boot.loader.systemd-boot.enable = true; ··· 47 50 isNormalUser = true; 48 51 description = "alex"; 49 52 extraGroups = [ "networkmanager" "wheel" ]; 53 53 + hashedPasswordFile = config.age.secrets."passwd".path; 50 54 packages = with pkgs; []; 51 55 52 56 openssh.authorizedKeys.keys = [

+9

secrets/common/passwd.age

reviewed

··· 1 1 + age-encryption.org/v1 2 2 + -> ssh-ed25519 eJaLeQ BsD+5eVFwNS7cbipjO6/TfyGzH0cbGlwt6LZXROPWE0 3 3 + z45+oGlE63yDBumLEHCe0WqVWQO2S47xoQQMMQzLifs 4 4 + -> ssh-ed25519 Z6U4Gw arCaXTErcCyLW4cgKmjAQP/v93soU4NegDy40po8OGU 5 5 + 0z2kWhw8qtddSXMfAarSMd2JXmKMY/g4iLS/2B+WubY 6 6 + -> ssh-ed25519 PCx17Q DoRWmmLSC3KyMH/TEsERVPmeYRKh9K6WkUp/KI3tam8 7 7 + Z9qUG/NpXg4iDbB6xaG6fQW1pRUrDqIJNjFUCJFcDCE 8 8 + --- zuwh80/uVvKrhtPTRmZ85ikIK5Pg8Q5CFUGmR65dUm4 9 9 + ��e'�yI�z�{��%��5
�^xk����?���o����?W�u|�5<��6�<��x��%X�&�|Y�o+#�w�)�F��'1vt���/�,E(�G
M�R���;=

+2

secrets/secrets.nix

reviewed

··· 10 10 "caddy.age".publicKeys = [ alex ferret ]; 11 11 "paperless-password.age".publicKeys = [ alex ferret ]; 12 12 "miniflux-creds.age".publicKeys = [ alex ferret ]; 13 13 + 14 14 + "common/passwd.age".publicKeys = [ alex polecat ferret ]; 13 15 }