starred/nix-config
1
0
Fork 0
mirror of https://github.com/ryan4yin/nix-config.git synced 2026-07-18 18:41:10 +02:00
Code Issues Packages Projects Releases 10 Wiki Activity

feat: harden my private secrets

Browse Source
This commit is contained in:
Ryan Yin
2023-07-14 17:09:47 +08:00
parent f34bf79884
commit 54bb672d9e
10 changed files with 108 additions and 65 deletions
Download Patch File Download Diff File Expand all files Collapse all files
secrets/default.nix
+16 -3
View File
@@ -1,4 +1,4 @@
{ pkgs, agenix, ... }:
{ pkgs, agenix, mysecrets, ... }:
{
imports = [
@@ -19,7 +19,7 @@
# target path for decrypted file
path = "/etc/wireguard/";
# encrypted file path
file = ./encrypt/wg-business.conf.age;
file = "${mysecrets}/wg-business.conf.age";
mode = "0400";
owner = "root";
group = "root";
@@ -30,6 +30,19 @@
# wether secrets are symlinked to age.secrets.<name>.path
symlink = true;
# encrypted file path
file = ./encrypt/smb-credentials.age;
file = "${mysecrets}/smb-credentials.age";
};
age.secrets."alias-for-work.nushell" = {
# wether secrets are symlinked to age.secrets.<name>.path
symlink = false;
# encrypted file path
file = "${mysecrets}/alias-for-work.nushell.age";
};
age.secrets."alias-for-work.bash" = {
# wether secrets are symlinked to age.secrets.<name>.path
symlink = false;
# encrypted file path
file = "${mysecrets}/alias-for-work.bash.age";
};
}