feat(hosts/server): adding the secrets to the configuration

This commit is contained in:
Raphael 2025-10-16 16:30:34 +02:00
parent 7e594e5869
commit c1b3df9e32
No known key found for this signature in database
3 changed files with 26 additions and 0 deletions

View file

@ -2,6 +2,7 @@
config, config,
pkgs, pkgs,
lib, lib,
inputs,
... ...
}: }:
@ -62,11 +63,13 @@
]; ];
}; };
environment.variables.AGE_KEY_FILE = "/root/.config/age/keys.txt";
programs = { programs = {
zsh.enable = true; zsh.enable = true;
}; };
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
age
bat bat
cairo cairo
dconf dconf
@ -102,5 +105,7 @@
xsel xsel
yarn yarn
zsh zsh
] ++ [
inputs.agenix.packages.${pkgs.system}.agenix
]; ];
} }

View file

@ -10,6 +10,7 @@
imports = [ imports = [
../global.nix ../global.nix
./hardware-configuration.nix ./hardware-configuration.nix
./secrets.nix
../../modules/games.nix ../../modules/games.nix
../../services/forty_two.nix ../../services/forty_two.nix
../../services/discord.nix ../../services/discord.nix

20
hosts/server/secrets.nix Normal file
View file

@ -0,0 +1,20 @@
{ config, pkgs, inputs, ... }:
{
imports = [ inputs.agenix.nixosModules.default ];
age.identityPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
age.secrets."mailjet-user" = {
file = ../../secrets/mailjet-user.age;
owner = "root";
group = "root";
mode = "0400";
};
age.secrets."mailjet-pass" = {
file = ../../secrets/mailjet-pass.age;
owner = "root";
group = "root";
mode = "0400";
};
}