rework secrets

This commit is contained in:
uku 2024-01-18 16:11:18 +01:00
parent e22617306e
commit 0cac64029a
Signed by: uku
GPG key ID: 7D01D7B105E77166
9 changed files with 65 additions and 63 deletions

View file

@ -10,6 +10,8 @@
identityPaths = ["/etc/ssh/ssh_host_ed25519_key"];
secrets = {
rootPassword.file = ../secrets/${config.networking.hostName}/rootPassword.age;
userPassword.file = ../secrets/userPassword.age;
tailscaleKey.file = ../secrets/tailscaleKey.age;
};
};
@ -104,6 +106,8 @@
time.timeZone = "Europe/Paris";
users.users.root.hashedPasswordFile = config.age.secrets.rootPassword.path;
# This value determines the NixOS release from which the default
# settings for stateful data, like file locations and database versions
# on your system were taken. Its perfectly fine and recommended to leave