From 56a6d00ff59136f704bdee6b46f2843df889bf08 Mon Sep 17 00:00:00 2001 From: Greg Hellings Date: Tue, 12 Apr 2022 15:13:29 +0000 Subject: [PATCH] Add agenix for secret management --- base.nix | 6 ++++-- configuration.nix | 1 + secrets/matrix.age | Bin 0 -> 2378 bytes secrets/secrets.nix | 13 +++++++++++++ 4 files changed, 18 insertions(+), 2 deletions(-) create mode 100644 secrets/matrix.age create mode 100644 secrets/secrets.nix diff --git a/base.nix b/base.nix index 4978d41..130451d 100755 --- a/base.nix +++ b/base.nix @@ -73,13 +73,15 @@ in # Base packages that need to be in all my hosts environment.systemPackages = with pkgs; [ - vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default. - wget + (pkgs.callPackage "${builtins.fetchTarball "https://github.com/ryantm/agenix/archive/0.10.1.tar.gz"}/pkgs/agenix.nix" {}) git home-manager htop python3 + pwgen tmux + vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default. + wget ]; i18n.defaultLocale = "en_US.UTF-8"; diff --git a/configuration.nix b/configuration.nix index 34f76ec..44f5a76 100644 --- a/configuration.nix +++ b/configuration.nix @@ -7,6 +7,7 @@ { imports = [ # Include the results of the hardware scan. + "${builtins.fetchTarball "https://github.com/ryantm/agenix/archive/0.10.1.tar.gz"}/modules/age.nix" ./hardware-configuration.nix ./base.nix ./host diff --git a/secrets/matrix.age b/secrets/matrix.age new file mode 100644 index 0000000000000000000000000000000000000000..d1413eb3a7bf706a556596a17b5d19767672b0b9 GIT binary patch literal 2378 zcmYk6x$86s9mcg%2Cb}2^#;U);dN(rZiUFsy>s6eCNMkq?Ck8^SEZ#0S}7?7n}D6c zDu|FO5F`;i3M&JGSosGC`m^&N_8Ng{@p$f&Y0KQ&S3|Ig>eO2>UrTQDBtBHWbe>%x!lODH zxYz?bTQnr;rEs-V9!ZZq>Wtb@BlIW)cGgjob#t21H*EJ|Lgrrq z&gSufcIiwniANx9^4L})7u8yQ&u+srT~Cfg-I4~q$c&8B%hV{9JFk^nWNI@5WWvY( zAPHqfS=U@E6pa=(*3HsUKtPR-jwk8oPe)`F$~oQ7-H-&0z4BLrDocYyA3#JD#U0O` zGD}5D+Uly1S%!FEl#OSeY%Jy26S7xkM~F@dEZQ4}bI4uaCc7b;LbL%NMU<;+94B33 zv#}-gQ=V}MGV@@1uF>lrG4-0?^ryBra+MADNP-m#GjLbc!$+<0Kp`MTW^ZPZxS+_R zJzldt9kF|Pwrc$edL9lRO3d%c!x(pW&_T9pfH(4LoQDbe`QlvImZwaV zb6S511|;hEyBYKI(5a^|A1Hj5Y+49iqrfsL;7x&&2Lb~!sXgr>3%OktDY-ZBx4g{z z+~`hP%o`$i=SHoaX-#F&|L3@@?WJA;o9a}y;htx7xw2b`UE&j7MFn`dN>Hq|O;x9w zKpK}=W(fV_ZrD)gVR|r%&W6WTl>vL7p_BZQ%frUIlWWs?D(6gb(Wk5I#vSjTP)N8` zcjQ)^dBOUZhpQ8%#nae2D{yK6B2{$xj&}}Pn6j+au0Azpwkkd%-ZGYzwgcBq?pO#t zXj2U96lPhi;o(-Uo^`b!00>{{<9-C>R10G5S9uz?FR=PYqq|Gp%+e)~&%V%_f z#8_R7tHPva!RtM+X_YbXkr(v0bZ8!Ob3WQqsQo-_?e0LmdV$txCr5b3h-!xXE8N

?J{=4wR1lrSYdng#RKXu9#}DzztepESL4 zE>Z^=KuaeiN6=wVc9rNLF^UUo3SauxlO<>%{avTGG-P)kZPPT~J7R9d(-D6y`2yWQ5`sw=;JX-RJOG%#adZXM0P`02Y+uG+3**(R#+k`u1~F<7(VM!TAN#hp7iwnR1RM+sh^I_wk+}_4r>dUu z%)s0cQE+%cFHyY^Sw^ssww#sG3~Ks`Kw0u4+yff3+w2DoQvs2CiMYBiA!`i=HEc2p z#B>W5@ewGMLRxazWhD4ZDImTgp8Xv(`8)=2a(%oLzExUvkLS_b%*Llz|RvIyatS0~vytICg~et+N~qQ7zmpGaD62y_F`kc#P{k zez>z>`5ZZ9E0WK8PfA!&qzkT!VuYL5-