delta/dotfiles
1
0
Fork 0
mirror of https://github.com/deltathetawastaken/dotfiles.git synced 2025-12-06 07:16:37 +03:00
Code Issues Actions Packages Projects Releases Wiki Activity

wifi in sops

Browse source
This commit is contained in:
Your Name 2024-03-16 11:47:14 +03:00
parent 3f38b5a386
commit 449a0fa5b0
2 changed files with 41 additions and 15 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
.sops.yaml
View file

@ -6,3 +6,7 @@ creation_rules:
key_groups: key_groups:
- age: - age:
- *dlaptop - *dlaptop
- path_regex: secrets/wifi/[^/]+$
key_groups:
- age:
- *dlaptop

52
hosts/dlaptop/sops.nix
View file

@ -1,5 +1,18 @@
{ config, lib, ...}: { config, lib, ...}:
let
# Get the list of all secret files
secretsDir = ../../secrets/wifi;
secretFiles = builtins.attrNames (builtins.readDir secretsDir);
# Generate an attribute set where each attribute corresponds to a secret file
wifiSecrets = lib.genAttrs secretFiles (secret: {
sopsFile = ../../secrets/wifi/${secret};
format = "ini";
path = "/etc/NetworkManager/system-connections/${builtins.replaceStrings [".ini"] [""] secret}.nmconnection";
mode = "0400";
});
in
{ {
sops = { sops = {
defaultSopsFile = ../../secrets/generic.yaml; defaultSopsFile = ../../secrets/generic.yaml;
@ -7,23 +20,32 @@
#age.keyFile = "/home/delta/.config/sops/age/keys.txt"; #age.keyFile = "/home/delta/.config/sops/age/keys.txt";
defaultSopsFormat = "yaml"; defaultSopsFormat = "yaml";
secrets.qqq = { secrets = {
mode = "0400"; owner = "delta"; group = "users"; qqq = {
}; mode = "0400"; owner = "delta"; group = "users";
};
secrets.cloudflared = { cloudflared = {
mode = "0400"; owner = "cloudflared"; group = "cloudflared"; mode = "0400"; owner = "cloudflared"; group = "cloudflared";
}; };
secrets."myservice/my_subdir/my_secret" = {}; "myservice/my_subdir/my_secret" = {};
secrets.singbox-aus = { singbox-aus = {
sopsFile = ../../secrets/singbox-aus.bin; sopsFile = ../../secrets/singbox-aus.bin;
format = "binary"; format = "binary";
mode = "0400"; mode = "0400";
owner = "socks"; owner = "socks";
group = "socks"; group = "socks";
}; };
#HomeNet = {
# sopsFile = ../../secrets/wifi/HomeNet.ini;
# format = "ini";
# path = "/etc/NetworkManager/system-connections/HomeNet.nmconnection";
# mode = "0400";
#};
} // wifiSecrets;
}; };
} }