Personal Nix setup
0
fork

Configure Feed

Select the types of activity you want to include in your feed.

New keyring

+140 -27
+19
home/base/assets/pubring.asc
··· 1 + -----BEGIN PGP PUBLIC KEY BLOCK----- 2 + 3 + mDMEaLwUnBYJKwYBBAHaRw8BAQdAjIduCpO4m5t7737VkE5zRcKGmb/1nqJY5sXp 4 + R9lRfCm0H1BoaWwgUGx1Y2t0aHVuIDxwaGlsQGtpdHRlbi5zaD6IjgQTFgoANhYh 5 + BAP1bdhjM/hCAa+HXjrukEBCZX1MBQJovBScAhsBBAsJCAcEFQoJCAUWAgMBAAIe 6 + AQIXgAAKCRA67pBAQmV9TMGOAQDYC102wxnv+KzJoWHXo8cr7ZdT84MMfNGLPC58 7 + AjMbzwEAjR3G+WGp21K1xLNln363H36OcP6zfpYOg9OIku4SNQa4MwRovBTgFgkr 8 + BgEEAdpHDwEBB0BoDZcMUBUXGY5zsqDUPRw5IRqxElPCeX8HdB3hegomIIjvBBgW 9 + CgAgFiEEA/Vt2GMz+EIBr4deOu6QQEJlfUwFAmi8FOACGyIAgQkQOu6QQEJlfUx2 10 + IAQZFgoAHRYhBAIBz21/LJMaNn2X806vPUPNuwHJBQJovBTgAAoJEE6vPUPNuwHJ 11 + G5gBAIHuYg8gDdxe4/kJRokngEHB18NwB9dA/POXFR3wKhMUAP9Z5jGCn8Upxya8 12 + orsxbsqksPNude8HpUYioGktx0uCAZ97AQCHMAL/oqKzYNsCXdPZzAQf21vs8WX0 13 + 7MBPJ7nrPdyVkwD/ciAeY+p5m1A2nlvN5hr9zE3Z8+4ns09Z6lECMpzs4QG4OARo 14 + vBUwEgorBgEEAZdVAQUBAQdAofLCbLA4tzpxpVRrrYDaXGwmJKhl14KXeYGpLk+K 15 + WHYDAQgHiHgEGBYKACAWIQQD9W3YYzP4QgGvh1467pBAQmV9TAUCaLwVMAIbDAAK 16 + CRA67pBAQmV9TB0QAP9nlXKcrofKiV/B5GL8ypbFOOpd9HNIbRFaEESrAn/NKAEA 17 + vsGuiF1jCMUVlJT+n1V9zlmEbrylkLniLf+NNKrZGAI= 18 + =Nqex 19 + -----END PGP PUBLIC KEY BLOCK-----
home/base/encrypt/147CBD801C5E0D0C27DD006653D3D96FF952F652.key.age

This is a binary file and will not be displayed.

home/base/encrypt/75EF1DBB30A59CFB56BCE06A88CCF363DA63B1A7.key.age

This is a binary file and will not be displayed.

home/base/encrypt/CA84692E3CC846C8EC7272468E962B63FC599E49.key.age

This is a binary file and will not be displayed.

home/base/encrypt/DDA4674BEB2FBE8A1EFB6F542FA66EDC2BFD54F5.key.age

This is a binary file and will not be displayed.

home/base/encrypt/E2BFF19637FDC25A02F45583176FAD1ED1F6BDD6.key.age

This is a binary file and will not be displayed.

home/base/encrypt/F6BECEF8FA360886C588883F90AD03CBE7B6450A.key.age

This is a binary file and will not be displayed.

home/base/encrypt/pubring.kbx.age

This is a binary file and will not be displayed.

+29 -22
home/base/gpg.nix
··· 1 - { lib, helpers, config, ... }: 1 + { lib, helpers, config, pkgs, ... }: 2 2 3 3 with lib; 4 4 let ··· 18 18 enable = true; 19 19 homedir = home; 20 20 mutableKeys = true; 21 + mutableTrust = true; 22 + publicKeys = [ 23 + { source = ./assets/pubring.asc; trust = "ultimate"; } 24 + ]; 25 + settings = { 26 + default-key = "DDA4674BEB2FBE8A1EFB6F542FA66EDC2BFD54F5"; 27 + keyserver = "hkps://keys.openpgp.org"; 28 + keyserver-options = "auto-key-retrieve"; 29 + }; 30 + scdaemonSettings = { 31 + disable-ccid = true; 32 + }; 21 33 }; 22 34 23 35 services.gpg-agent = { 24 36 enable = true; 25 37 enableSshSupport = true; 26 38 verbose = true; 27 - sshKeys = [ 28 - "E2BFF19637FDC25A02F45583176FAD1ED1F6BDD6" 29 - "75EF1DBB30A59CFB56BCE06A88CCF363DA63B1A7" 30 - ]; 39 + pinentry.package = pkgs.pinentry_mac; 40 + sshKeys = [ "DDA4674BEB2FBE8A1EFB6F542FA66EDC2BFD54F5" ]; 31 41 }; 32 42 33 43 systemd.user.services.gpg-agent.Service.Slice = "session.slice"; 34 44 35 - modules.git.signingKey = mkDefault "303B6A9A312AA035"; 45 + modules.git.signingKey = mkDefault "4EAF3D43CDBB01C9"; 36 46 37 - age.secrets."pubring.kbx" = { 38 - symlink = true; 39 - path = "${home}/pubring.kbx"; 40 - file = ./encrypt/pubring.kbx.age; 41 - }; 47 + home.file."${home}/sshcontrol".text = "DDA4674BEB2FBE8A1EFB6F542FA66EDC2BFD54F5"; 42 48 43 - age.secrets."75EF1DBB30A59CFB56BCE06A88CCF363DA63B1A7.key" = { 49 + # ed25519 2025-09-06 [C] 50 + age.secrets."147CBD801C5E0D0C27DD006653D3D96FF952F652.key" = { 44 51 symlink = true; 45 - path = "${home}/private-keys-v1.d/75EF1DBB30A59CFB56BCE06A88CCF363DA63B1A7.key"; 46 - file = ./encrypt/75EF1DBB30A59CFB56BCE06A88CCF363DA63B1A7.key.age; 52 + path = "${home}/private-keys-v1.d/147CBD801C5E0D0C27DD006653D3D96FF952F652.key"; 53 + file = ./encrypt/147CBD801C5E0D0C27DD006653D3D96FF952F652.key.age; 47 54 }; 48 - 49 - age.secrets."E2BFF19637FDC25A02F45583176FAD1ED1F6BDD6.key" = { 55 + # ed25519 2025-09-06 [SA] 56 + age.secrets."DDA4674BEB2FBE8A1EFB6F542FA66EDC2BFD54F5.key" = { 50 57 symlink = true; 51 - path = "${home}/private-keys-v1.d/E2BFF19637FDC25A02F45583176FAD1ED1F6BDD6.key"; 52 - file = ./encrypt/E2BFF19637FDC25A02F45583176FAD1ED1F6BDD6.key.age; 58 + path = "${home}/private-keys-v1.d/DDA4674BEB2FBE8A1EFB6F542FA66EDC2BFD54F5.key"; 59 + file = ./encrypt/DDA4674BEB2FBE8A1EFB6F542FA66EDC2BFD54F5.key.age; 53 60 }; 54 - 55 - age.secrets."CA84692E3CC846C8EC7272468E962B63FC599E49.key" = { 61 + # cv25519 2025-09-06 [E] 62 + age.secrets."F6BECEF8FA360886C588883F90AD03CBE7B6450A.key" = { 56 63 symlink = true; 57 - path = "${home}/private-keys-v1.d/CA84692E3CC846C8EC7272468E962B63FC599E49.key"; 58 - file = ./encrypt/CA84692E3CC846C8EC7272468E962B63FC599E49.key.age; 64 + path = "${home}/private-keys-v1.d/F6BECEF8FA360886C588883F90AD03CBE7B6450A.key"; 65 + file = ./encrypt/F6BECEF8FA360886C588883F90AD03CBE7B6450A.key.age; 59 66 }; 60 67 }; 61 68 }
+1 -1
modules/server/sshd.nix
··· 15 15 16 16 config = mkIf cfg.sshd.enable { 17 17 users.users."${user}".openssh.authorizedKeys.keys = [ 18 - "ssh-rsa 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" 18 + "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGgNlwxQFRcZjnOyoNQ9HDkhGrESU8J5fwd0HeF6CiYg" 19 19 ]; 20 20 21 21 services.openssh = {
+88
pubring.asc
··· 1 + -----BEGIN PGP PUBLIC KEY BLOCK----- 2 + 3 + mQINBFswTdoBEADBhmVcJw+8quIAs7AddrvwZ+BVBS8/B8aAH8uzAaiQnbs1RnSd 4 + 7fUFtw9UvcE5BiohONNgWOjJ0KefDbrcOBxmhOII2eD6DEXHGghSxhOacCPOFIP0 5 + JA1r+MaKXSCp8cw6F1DgwKxIdEVmqcq+bxaJFH6e2a/WdAGF9t3y7PFq2QperMq8 6 + obpZXB2FXsJkk4XC5TlCPTEtywaW2gg814ENka1gzMjqd32iZaMuU9EAsBb04+Vv 7 + oobxLPiAl5tX9qxOBL1OVMNTEwvG0qKQrvxRBsEkhaskyJWWkEkghiyFJ1YEWEJj 8 + UAabqLQXfjVDJdxlEa7YVG0Hk0C5LTCMvJDcFjoNqlRAOgcQH75dr+WPMCetqpVo 9 + iyw07R2qpiPQUq2Uqu54rsuqM7wWKXukuf8VsytGviYpEor8UtahSWmuObyEo72T 10 + zsp1S7Vz6Uk9JLXSyV/m2cABIRo3e/ao2KcpyO/8OtyVkxqz3tRyzsUlalfhAcbC 11 + c/OOUB5zcxzS2DiuqdVtJYkPuqXUGnBrhBIx7+qg4yx7QedQpFNn07uD+wZc6572 12 + U1q0Zlg0MkRRPQrQ4KvLqX9fGBq0Au755Fb5gHev17sgXXHt0PvQQNfNsxTkbSny 13 + G/rRx/8pBS/6SUUopyMaz+/Y6x9aKeb1+KhXUG4WKBUlay3XD2wbfoSaSwARAQAB 14 + tC5QaGlsIFBsdWNrdGh1biAoU3VyZmFjZSBCb29rKSA8cGhpbEBraXR0ZW4uc2g+ 15 + iQI3BBMBCAAhBQJbME3aAhsDBQsJCAcCBhUICQoLAgQWAgMBAh4BAheAAAoJEDA7 16 + apoxKqA13noP/RZCh97CQxz3CHfJBBGWE+e94QXVzmJhg2t4vNyMa67ULhy+AVQ+ 17 + 1JWQkBO/+yLKR4i+gl3FqOTWt88/pMtmf8Tnn4Zy+tpD+s4eQfavLCrqFZ463tZj 18 + 6d1IkjVXOvAZQYu/2RrqBVCSAVLqcQg7C+vWgDuOlkxaI66th1s9Y8YOvZo7d1/o 19 + 6uvhXQX9lh+2tirdx/yyFEhMofJ8ITPlAK/RtOJiIGYajVNK9e/eMmG+xkvzMbyw 20 + SVsX5s95x6pkQhlvp7Yv9snr2qzBAWsSh4mcAdLKbmVRnda7/+kqHpN7D2eVFwRs 21 + d2af82Nq+JvO6HhfMaYn8CR/YVZGz3sajX89ROwau1D6UF7I4sXuhib7uuqRXsPy 22 + j7dOYkgMYDyvweL5OkGm2svafAkTC0RTP2LiWTjisJOfPe3H5/nKIjaX1R9fM6GK 23 + kSiuKAdPu5x8wGvLiuUeHl2VeZxfD2pP9fN79jviF9hG4/MxtaGfBtq5WQvUYTb5 24 + lwiJ+GaxfznSp3kW335KO+eYtDKTrH/9P0exItEDwm6lZjE3d3k752op3FbssQjy 25 + dg9bsb8/n6WIqleB+5va5NvsVBBg53A2m3bOQinE0Do6dHHB1yvkwsajqvJ5DRZb 26 + /B7y7/gOpJsuLEJ5FAm9UsYuhbt/SByWIqXh6dBwU9yixuC3uYfY35XFuQINBFsw 27 + TdoBEADQHUVtAqxr7otHdMsRORoUOJK9z5DPav7YmsjVvrFhb2PdFfAlVqZ7iA4D 28 + VKInSn4umNiJHQipyOVGc3B9jVVaOKgeuSXEPiu+BS6GPGj/GKwtPns//9u73GSL 29 + IbfMXV5Pe2OH0kPcoRrgr5GvrDfbftemL77cu+SIJ51nGu6tnQgbJt9NjV9MC3Br 30 + Wtnf5ceEkxfmPQwNzGGzuWPrwRCoS4xjaBEQPM770lU1KPCORZB+g1D57sOdaIsY 31 + rFvalwaejqwDN1gknQw7f9beP+7i8DARIShhvu57EzctwmPaptyvPA7if2aUdmFA 32 + uCKmqXZ9El0LZ25rKwvwjPd7EUU+NE0P+AOR/u0FfwKC4PRP6JElO6urpKDqL4K+ 33 + w6KFPTG12KIdsOTXSZB3TSzHhvoI7Sstg5sVD3si3ltwAC4hn6XxjZVo5hqeG1Jq 34 + BTDERDTY27aBq2t53klfHigigxTzMzS8AEca69VEOcpVnMSytphrVBirgo2hIRNQ 35 + bjVoruSPd+S0xVddhWOHly46KGpMPzX+tMpJTZJAdjdTrKqWyMFWhKbPwdb6EXIe 36 + EdI0yzrJt62GyN+SxxA2xaSIkPiJooI4hwjag546SsJyguVqMvVpPmYvT7dBvexo 37 + WQN7evdoUC9cVd2seEAeHUXoOIaf0gIeWsVHyNy0rykkxvrbRQARAQABiQIfBBgB 38 + CAAJBQJbME3aAhsMAAoJEDA7apoxKqA1maQQAJjn7/7qEFMW1WXBHQsHzr10HV8t 39 + jCM9+dlmSnxotRAz9xrtJG5UmdkE6RRINoxXBqabFSRNOOnSIZE2oz7UoCy/dG6+ 40 + ohM3TepzUHLJw7zga6AwI0ShP9vzexbhsVkcenPaXBbR3hxu4SMDhC8x+s2epsE4 41 + lpR1H398qwTxGMBnfKmyinh3wbNLaJ2c7kZvojk/LgOmU828ZcjZ+OevOa0pYBDM 42 + LBwq/KLIfsv3sEM/qz6i/+UCTffgdnLAKna9OsfDYYJ0Z+HtCt0ONGHJuGar3R5d 43 + R/6gMUih61MklxG9w/cKeasTJZjDRliqScdpkt6tv/aVz+J3oB5Tx7U6GhtWYltJ 44 + cWLjyzW1hF/QJwVg7nJJc5vUBA34P80B7ZsYJvxbhqELqehRwKXv40iy1M8Jir2s 45 + 3ZthMYA8K4U+FdDBvln32QCygo2bAg9ZwDIqB3BJhiOVcMs4H8UrJredE9OGa/pV 46 + XDnSWgbsC64A31jx9eYuhRiR8upz4TrgJCNhaRTnA/F+BUM7CwHj+ThWRyUIgX8Q 47 + UCy4CKcmPyQrt0NyuSJ30cUkuygDfN18d+r2DGLJnN6fDjNez40zpLshbf+hQPgj 48 + 6vMzvlKFwWFQFaOlA81XxfYDj99OUAtRUO94YbeiRflE882iU3lCwqs5ieBlB5L9 49 + jfLZemex+vOUQixeuQINBFswTfcBEADZVcY+kkbEtIiYjSyIMeIJNZjUpK+kgpMQ 50 + EIOqtG5GIkTV5rb9DOoruAYy1/2HPpAaDUl7ISorBc4g0v/98cEaF04PIOWpm+Hc 51 + tLhPNyI0f7TClQIFNU8PLO5bMzAvIdJQmJavd42cVZmz44N8C12nL3mzCIaLGsVW 52 + /iAc2H2viHoOT3ZYxhq1f0kaDhLYjaserNgLqX12E3q5f3z1HkAg2ivRt5NHs4t4 53 + N5L6dqS/GnLAaK9rT1yCuIPQT4+XvKycaos/dMLWSPzz3ROV9mATg2uzQx9DiQd7 54 + s0pQ4UjUNL/XHlVj0TnQAS6fioVlkfb6dAxzIm9D+O4NI6b2m23Jo2XXoChKkRtV 55 + bBX/bJH8YZS2QdIlwlm57yyEbipCFjha8/GH2LUSqEkAZpbDFkIl77aSDX/D+l5s 56 + vXIZke3PUmL9VX31UglP6/1hqFjMNvZHMbf+bjpjw2UILPph3QogMw8LeSfndFDD 57 + tkCDuP25MyjWi4h2QGVc8ibtQnDu3Lj8HhdQ2dOXPuHgMnty9YZXWfGaStIIsS26 58 + ZiXbkvRG5e8rlIXQbz8V1aS9851ODOeoXAU87aAG8MKiWJgtrcJRtBcZJHTZHk/I 59 + /fSKsyARWz8xtfrIOsCLSWWiY0lpCUYTCrZ4uh9jFEkYda9S8efh7QmOLXraqn6G 60 + w+psKiU9FwARAQABiQIfBBgBCAAJBQJbME33AhsgAAoJEDA7apoxKqA16fgP/20u 61 + zSx36iRx+ZBRqXAseErp4WtWzcLC6Vje1zt05SVDukjJbCVnCexG6sI8r3OGf7bJ 62 + IAu4ewwTbghIn7yvytceGHg1vjy6YZm1dapfiZ2Z7WTj+bN/YkwbduEWx5fpsjtW 63 + nkmoQ4v5I0EJz0Her9gHGTs2JI2/ZdmLlM9rmVpJp2V8JFPIYJQTZDmWDogD5USG 64 + qnegF5pIfPCGHcFPD8p2bOuLbttBCM+KeplNBzcRLCrPt4nr/rjbmHf8+mI8JHaN 65 + Eqtj74rLBt+cHHDWb9cXIEn9xeBpXF2qPsvyJ1q12xVSNJfVxRTPGh7aqLVBsurC 66 + Z5SOvagNNZccIVpMk7PZa2JgXUAs4BCAzoVnUpJZdVOlUuktHUjsPFvo5gUqKVCX 67 + tkoWjQSyxrDXBqxou4uLFCAAg+p3k953ehBrz4zyoPgHOXkanu+KRWXCZ2V4w30r 68 + /mF6qYU/uQkKQ7VrHtPRVwXudqzqtS4wVTP/nIePRuNZD6UdBdKkXp92ARn48bue 69 + GkYCtPS9Wd41c9/ExMbZPFyfoznADgzML98zFY9+MEOU2ZE+KTcjEVZYC+MRyeOU 70 + 3s5iYMFPIy9XlNxw6Cx2TmnhhV8CMWO+Srahc34xY6Vcn64pQMpknz8CNhtJjvDj 71 + ZfXl9pyLIhI+mT0A0csoqrfw2hOJGXqTATM43mummDMEaLwUnBYJKwYBBAHaRw8B 72 + AQdAjIduCpO4m5t7737VkE5zRcKGmb/1nqJY5sXpR9lRfCm0H1BoaWwgUGx1Y2t0 73 + aHVuIDxwaGlsQGtpdHRlbi5zaD6IjgQTFgoANhYhBAP1bdhjM/hCAa+HXjrukEBC 74 + ZX1MBQJovBScAhsBBAsJCAcEFQoJCAUWAgMBAAIeAQIXgAAKCRA67pBAQmV9TMGO 75 + AQDYC102wxnv+KzJoWHXo8cr7ZdT84MMfNGLPC58AjMbzwEAjR3G+WGp21K1xLNl 76 + n363H36OcP6zfpYOg9OIku4SNQa4MwRovBTgFgkrBgEEAdpHDwEBB0BoDZcMUBUX 77 + GY5zsqDUPRw5IRqxElPCeX8HdB3hegomIIjvBBgWCgAgFiEEA/Vt2GMz+EIBr4de 78 + Ou6QQEJlfUwFAmi8FOACGyIAgQkQOu6QQEJlfUx2IAQZFgoAHRYhBAIBz21/LJMa 79 + Nn2X806vPUPNuwHJBQJovBTgAAoJEE6vPUPNuwHJG5gBAIHuYg8gDdxe4/kJRokn 80 + gEHB18NwB9dA/POXFR3wKhMUAP9Z5jGCn8Upxya8orsxbsqksPNude8HpUYioGkt 81 + x0uCAZ97AQCHMAL/oqKzYNsCXdPZzAQf21vs8WX07MBPJ7nrPdyVkwD/ciAeY+p5 82 + m1A2nlvN5hr9zE3Z8+4ns09Z6lECMpzs4QG4OARovBUwEgorBgEEAZdVAQUBAQdA 83 + ofLCbLA4tzpxpVRrrYDaXGwmJKhl14KXeYGpLk+KWHYDAQgHiHgEGBYKACAWIQQD 84 + 9W3YYzP4QgGvh1467pBAQmV9TAUCaLwVMAIbDAAKCRA67pBAQmV9TB0QAP9nlXKc 85 + rofKiV/B5GL8ypbFOOpd9HNIbRFaEESrAn/NKAEAvsGuiF1jCMUVlJT+n1V9zlmE 86 + brylkLniLf+NNKrZGAI= 87 + =X7nn 88 + -----END PGP PUBLIC KEY BLOCK-----
+3 -4
secrets.nix
··· 16 16 "./home/fonts/encrypt/codicon.otf.age".publicKeys = keys; 17 17 "./home/fonts/encrypt/faicon.ttf.age".publicKeys = keys; 18 18 19 - "./home/base/encrypt/pubring.kbx.age".publicKeys = keys; 20 - "./home/base/encrypt/75EF1DBB30A59CFB56BCE06A88CCF363DA63B1A7.key.age".publicKeys = keys; 21 - "./home/base/encrypt/E2BFF19637FDC25A02F45583176FAD1ED1F6BDD6.key.age".publicKeys = keys; 22 - "./home/base/encrypt/CA84692E3CC846C8EC7272468E962B63FC599E49.key.age".publicKeys = keys; 19 + "./home/base/encrypt/147CBD801C5E0D0C27DD006653D3D96FF952F652.key.age".publicKeys = keys; 20 + "./home/base/encrypt/DDA4674BEB2FBE8A1EFB6F542FA66EDC2BFD54F5.key.age".publicKeys = keys; 21 + "./home/base/encrypt/F6BECEF8FA360886C588883F90AD03CBE7B6450A.key.age".publicKeys = keys; 23 22 24 23 "./home/development/encrypt/npmrc.age".publicKeys = keys; 25 24