starred/nix-config
1
0
Fork 0
mirror of https://github.com/ryan4yin/nix-config.git synced 2026-07-11 23:22:40 +02:00
Code Issues Packages Projects Releases 10 Wiki Activity

fix: attribute 'nix-access-tokens' missing for homelab

Browse Source
This commit is contained in:
Ryan Yin
2025-02-27 22:46:37 +08:00
parent 417d7ad2d7
commit cfdf12b356
5 changed files with 25 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
flake.lock
Generated
+3 -3
View File
@@ -814,10 +814,10 @@
"mysecrets": { "mysecrets": {
"flake": false, "flake": false,
"locked": { "locked": {
"lastModified": 1737955933, "lastModified": 1740667506,
"narHash": "sha256-ZFEmdm1T2F7kc1hHHKcg/+iaYmNJ+b5jMbvQ6aUuTis=", "narHash": "sha256-0cfi0sHvU23SDZqykO0+PrSTnxz0Lslo4z52L/H2VUE=",
"ref": "refs/heads/main", "ref": "refs/heads/main",
"rev": "f6aeb3fa21216c63f33a637d3f874a4bbddd5989", "rev": "2ed1bd37e3bbc553f5efe3b212333652fa5f3eab",
"shallow": true, "shallow": true,
"type": "git", "type": "git",
"url": "ssh://git@github.com/ryan4yin/nix-secrets.git" "url": "ssh://git@github.com/ryan4yin/nix-secrets.git"
outputs/x86_64-linux/src/kubevirt-shoryu.nix
+4 -1
View File
@@ -24,7 +24,10 @@
"hosts/k8s/${name}" "hosts/k8s/${name}"
]) ])
++ [ ++ [
# {modules.secrets.server.kubernetes.enable = true;} {
modules.secrets.server.kubernetes.enable = true;
modules.secrets.impermanence.enable = true;
}
]; ];
# home-modules = map mylib.relativeToRoot [ # home-modules = map mylib.relativeToRoot [
# "home/linux/tui.nix" # "home/linux/tui.nix"
outputs/x86_64-linux/src/kubevirt-shushou.nix
+4 -1
View File
@@ -24,7 +24,10 @@
"hosts/k8s/${name}" "hosts/k8s/${name}"
]) ])
++ [ ++ [
# {modules.secrets.server.kubernetes.enable = true;} {
modules.secrets.server.kubernetes.enable = true;
modules.secrets.impermanence.enable = true;
}
]; ];
}; };
outputs/x86_64-linux/src/kubevirt-youko.nix
+4 -1
View File
@@ -24,7 +24,10 @@
"hosts/k8s/${name}" "hosts/k8s/${name}"
]) ])
++ [ ++ [
# {modules.secrets.server.kubernetes.enable = true;} {
modules.secrets.server.kubernetes.enable = true;
modules.secrets.impermanence.enable = true;
}
]; ];
}; };
secrets/nixos.nix
+10 -7
View File
@@ -66,6 +66,16 @@ in {
"/etc/ssh/ssh_host_ed25519_key" "/etc/ssh/ssh_host_ed25519_key"
]; ];
# secrets that are used by all nixos hosts
age.secrets = {
"nix-access-tokens" =
{
file = "${mysecrets}/nix-access-tokens.age";
}
# access-token needs to be readable by the user running the `nix` command
// user_readable;
};
assertions = [ assertions = [
{ {
# This expression should be true to pass the assertion # This expression should be true to pass the assertion
@@ -112,13 +122,6 @@ in {
} }
// high_security; // high_security;
"nix-access-tokens" =
{
file = "${mysecrets}/nix-access-tokens.age";
}
# access-token needs to be readable by the user running the `nix` command
// user_readable;
# --------------------------------------------- # ---------------------------------------------
# user can read this file. # user can read this file.
# --------------------------------------------- # ---------------------------------------------