forked from Bos55/nix-config
refactor(security): migrate hardcoded credentials and SSH keys to sops-nix
This commit is contained in:
parent
cbb70ab8bb
commit
ccfa328771
10 changed files with 47 additions and 14 deletions
|
|
@ -1,4 +1,8 @@
|
|||
{
|
||||
imports = [
|
||||
./secrets.nix
|
||||
];
|
||||
|
||||
config = {
|
||||
homelab = {
|
||||
services.openssh.enable = true;
|
||||
|
|
@ -12,5 +16,10 @@
|
|||
|
||||
# Set your time zone.
|
||||
time.timeZone = "Europe/Brussels";
|
||||
|
||||
sops = {
|
||||
defaultSopsFile = ../../secrets/secrets.yaml;
|
||||
age.keyFile = "/var/lib/sops-nix/key.txt";
|
||||
};
|
||||
};
|
||||
}
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue