From 060c7ecff87d49bc86927e558ebd6a4e74253364 Mon Sep 17 00:00:00 2001 From: Your Name Date: Wed, 28 Feb 2024 23:50:27 +0300 Subject: [PATCH] add agenix + singbox in it --- hosts/dlaptop/age.nix | 9 +++++++++ hosts/dlaptop/configuration.nix | 6 ++++-- secrets/secrets.nix | 6 ++++++ secrets/singboxporta.age | Bin 0 -> 2507 bytes secrets/test.age | 5 +++++ 5 files changed, 24 insertions(+), 2 deletions(-) create mode 100644 hosts/dlaptop/age.nix create mode 100644 secrets/secrets.nix create mode 100644 secrets/singboxporta.age create mode 100644 secrets/test.age diff --git a/hosts/dlaptop/age.nix b/hosts/dlaptop/age.nix new file mode 100644 index 0000000..8227bd3 --- /dev/null +++ b/hosts/dlaptop/age.nix @@ -0,0 +1,9 @@ +{ stable, inputs, config, pkgs, lib, ... }: + +{ + age.secrets = { + socks_v2ray_sweden = { file = ../../secrets/singboxaus.age; owner = "socks"; group = "socks"; }; + }; + + age.identityPaths = [ "/home/delta/.ssh/id_ed25519" ]; +} \ No newline at end of file diff --git a/hosts/dlaptop/configuration.nix b/hosts/dlaptop/configuration.nix index 3bb408f..01fbcfb 100644 --- a/hosts/dlaptop/configuration.nix +++ b/hosts/dlaptop/configuration.nix @@ -2,7 +2,7 @@ # your system. Help is available in the configuration.nix(5) man page # and in the NixOS manual (accessible by running ‘nixos-help’). -{ inputs, stable, unstable, config, pkgs, ... }: +{ inputs, stable, unstable, config, pkgs, age, ... }: { time.timeZone = "Europe/Moscow"; @@ -264,7 +264,7 @@ User = "socks"; Group = "socks"; }; - script = "sing-box run -c /etc/sing-box/config.json"; + script = "sing-box run -c /run/agenix/singboxaus"; path = with unstable; [ shadowsocks-libev shadowsocks-v2ray-plugin @@ -272,6 +272,8 @@ ]; }; + #config.services.openssh.hostKeys = [ "/home/delta/.ssh/id_ed25519" ]; + systemd.services.NetworkManager-wait-online.enable = false; # This value determines the NixOS release from which the default diff --git a/secrets/secrets.nix b/secrets/secrets.nix new file mode 100644 index 0000000..9fdc1e7 --- /dev/null +++ b/secrets/secrets.nix @@ -0,0 +1,6 @@ +let + dlaptop = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGGL2UD0frl9F2OPBiPlSQqxDsuACbAVgwH24F0KT14L delta@dlaptop"; +in { + "test.age".publicKeys = [ dlaptop ]; + "singboxaus.age".publicKeys = [ dlaptop ]; +} \ No newline at end of file diff --git a/secrets/singboxporta.age b/secrets/singboxporta.age new file mode 100644 index 0000000000000000000000000000000000000000..ebea1b88ff40cffb1cdf620bd029ec61dd426cda GIT binary patch literal 2507 zcmV;+2{iU$XJsvAZewzJaCB*JZZ2Hl9b5vq0S~FN@buTqqLrQ2yOmI##PH|^pGHFsVD^Ut9EiE8fL|HO*Mm9%fFIhrM zc1dh+QDSaUc4jYiXhBtDXiY^=acVVkI89J_FgOb9b}JX4XA&{LH@QTIP^-=6LyZ&E zLGpM0Gd)t>cCwD9RtyP1V50@WQaOqG8R~VdpCWA!uhpru;kye|c3~h0D_gylTMFq# zj+l7&?-gIx=I)k4kIGAv56-x_Z#Kg$=^Fc}~Se@#Ac$RMf3Bs>CPA zla@(OCgpZ_F_)siRbH7G?N5Q>eam4nC35S*HRAt5gTzMVAaURq&9r3w+{zf-WF?py zb<3b=6#rlyCqus9)hJPa`h3MX>9w?7f+mm=W(1~CqJ9>I8eTgs|3rLks7{j|98Opq zdo2rzkk@uD$_b~=y-sw7L~Q*UQ3C+8kY@lHVuS|sx!3w08O((BnTVp@KYujdz(+%4 zj`HZbnSIRPYYVmEL8{TxwH5I5?ehN$XYH;oI-TC@;(67!zM(IF36L$taV=D1BBpw9 zRT)5SK{T&1#V9`N6|azlkP-A0A9XQMsX>X%qJ^r8bQv$(4zqfcZbI@k0uuK9+LclEo`-rFQuOB$u#y~WpDN!Ro$jV#bx|gcmfyirJ(_Ja`rd9&Mj}nj zEUXC`v%#zVm!OY0qumuQGwDQZc$fMgS<{y#{PPC-d);jJjSW}WR{f`{`W>(?`bH9u z`fK5S9~x1HBlxFBh3A{a&Ze+Q$~lby*Xx7IBu#RY13K>cBl;tT8Wf9x1@pbv!WC>xW247^fpUvKyk1OJ&UEx_sOtv@{_OG2BEVT^loh)R_>2u3 z(Vgr~kW{-pBlH@xEw<4@zFf7m)`JTGr*}4EM)_IN!dB^#6Q;i{XY z@V0?hPgEydTMiXA_3Y|UHJtXBFH!+LM%6$M!_Mn+lZRIbrHQf&I%mF+d%e#upyw>p+bH zN`6<;_T+Adp4EQVm#yV~@S6wd@11(KtITc&zPLotnP&K~FZ?{??HD*umb8vK*?ANq zU=mpL4ZWppdxr#_*MOCO18T64W)$F)eoNLSaCs4N9den{RFwAUhy&aJ1`+IU-gNh8 z>Z5)*sx5DdpTMfIEOOHD4apO3V5sHensw=j91MkB-82(111OJHh5Qx zG(LEZwDmzxyUl_49mjx^F_90{_otWZ#8@ezEVTmTlxlL9^45o&Ya0zR8ih9nyA1@{_NPx8V6Mme-zT}Dp82M70s$)bgNL)s5`DFUtTh)G z!+PlTRY0s=iiClXQz9;RPQ?S*qR&=1$-)d#imQEpr=^sG^J))r2{fLrC3~O4!Vlm5 z#i&PWDEKgtrPUtvIETJ20db=*K(4^`w}2hx&;L2k9}ITnrHAB+8tOxD8GM`jX4Ex5E{f~}nF_^=h0(bC%eBhgmtv>4cK4hJ z%el}@IE2$oQ>fcMTtB<=K*-4Cqk-=)oq}sag8FOR0U;&jewX7+xd+>e9so9HEPquo1czaH(An0ds{nM7)F@o9F0c@ z`a!on&@Zr=`3QYA&hlaXml7p3Hj&#^Bf5u)2beb!!PvMIC({~K950eW%#A`dag3U} zZKW72M^)9YuoFP>SOec6vQoOG1E_4r4a^@&zoL^Gj%YWB`rcbUy+GxPmlVH#Mr}wQ zsz^uDKm^c;yyU}N$lo)m4!!KZjUQvxU=|HbbZAH0^r(BZu3%`|_r(InDMx!LMv^Q= zSj?`~K)RB|C)DY2FaI5L)@!VBZ{mp_Rn|gdq*~84@l;>BUc^`}FXWHagfAN14D-lD z@}-N1R1p7G>*0)rg>(~vM%zww`8xTv34@LU)K_58zT|K$?WA{-I}I{$<4y^VL>F{{ z0J09R?>(YCykL^9zsZE+q{ydX%K~M_WJVZ73CgEp%|hR?NC)oyge1ta3K#*K^M$tF z!Zzr=t5}v%wm0%h=hlE<%U7EcjoPteT5WMP+nmzJqJ*E>Y!ZE;!B}}i7yctRokb^( z_i!N5_D=st$?~Y7O0yCt<91lMN8e#F*9?zj93VN%;SR*7|1XmrEzo!0aP3(m>Z((u z-IkGVO4Cp7Nyv;hr2apkz}D66h;Xxtn&Qzv*7q2<6fr4_LDk!T9N)H0qsXvGUKx5k zM8N?(rh{a1!^x`p1Kh;T{y8u2a1BrnNEmI4?G@EHJv2-cq@O~amWi)Y+r>g`HwVe012WEn>cApOst@6Ns7gQzIc0b(8EyQ(zsRLGIn6fOH zMtM}kk-9nc3Boe zMz|pvYENpX(iZV;=(gYd0v8X}3rQdlp{QNq$<7RsVF}6e-RqOUtvHVz7j;kHbms7r V8Kin&RHnRBQ9`xR8;lp0U=#Vc!bboA literal 0 HcmV?d00001 diff --git a/secrets/test.age b/secrets/test.age new file mode 100644 index 0000000..bb200d1 --- /dev/null +++ b/secrets/test.age @@ -0,0 +1,5 @@ +age-encryption.org/v1 +-> ssh-ed25519 WaXiIA d5rkOEoS+1Hbm1052rjg2syFrAjK/zAUncW4PeIJDwA +Rdkm26cHFw9erjUZOJipAZ51/D8poXtMdCzY0FlIuTM +--- ODDKDz/Bn3WFnqLfQGfjR9SE5mfp1Ob1aOvxAf+vhLY +O~MT0YDTo!K^nLsw@ \ No newline at end of file