refactor(security): migrate hardcoded credentials and SSH keys to sops-nix

This commit is contained in:
Tibo De Peuter 2026-03-17 21:45:56 +01:00
parent cbb70ab8bb
commit ccfa328771
Signed by: tdpeuter
GPG key ID: 38297DE43F75FFE2
10 changed files with 47 additions and 14 deletions

View file

@ -1,4 +1,8 @@
{
imports = [
./secrets.nix
];
config = {
homelab = {
services.openssh.enable = true;
@ -12,5 +16,10 @@
# Set your time zone.
time.timeZone = "Europe/Brussels";
sops = {
defaultSopsFile = ../../secrets/secrets.yaml;
age.keyFile = "/var/lib/sops-nix/key.txt";
};
};
}