adtya/configuration.nix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

all: refactor host specific secrets

Browse source
This commit is contained in:
Adithya 2024-06-30 18:45:27 +05:30
parent 95c3317490
commit 5a8b7d4c74
Signed by: adtya
GPG key ID: B8857BFBA2C47B9C
5 changed files with 22 additions and 20 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

20
common/secrets.nix
View file

@ -14,26 +14,6 @@
group = config.users.users.root.group; group = config.users.users.root.group;
neededForUsers = true; neededForUsers = true;
}; };
"wireguard/psk/skipper" = {
mode = "400";
owner = config.users.users.root.name;
group = config.users.users.root.group;
};
"wireguard/psk/rico0" = {
mode = "400";
owner = config.users.users.root.name;
group = config.users.users.root.group;
};
"wireguard/psk/rico1" = {
mode = "400";
owner = config.users.users.root.name;
group = config.users.users.root.group;
};
"wireguard/psk/rico2" = {
mode = "400";
owner = config.users.users.root.name;
group = config.users.users.root.group;
};
}; };
}; };
} }

6
hosts/rico0/wireguard.nix
View file

@ -1,4 +1,10 @@
{ config, ... }: { { config, ... }: {
sops.secrets."wireguard/psk/rico0" = {
mode = "400";
owner = config.users.users.root.name;
group = config.users.users.root.group;
};
networking.firewall.trustedInterfaces = [ "wg0" ]; networking.firewall.trustedInterfaces = [ "wg0" ];
networking.wireguard = { networking.wireguard = {
enable = true; enable = true;

6
hosts/rico1/wireguard.nix
View file

@ -1,4 +1,10 @@
{ config, ... }: { { config, ... }: {
sops.secrets."wireguard/psk/rico1" = {
mode = "400";
owner = config.users.users.root.name;
group = config.users.users.root.group;
};
networking.firewall.trustedInterfaces = [ "wg0" ]; networking.firewall.trustedInterfaces = [ "wg0" ];
networking.wireguard = { networking.wireguard = {
enable = true; enable = true;

5
hosts/rico2/wireguard.nix
View file

@ -1,4 +1,9 @@
{ config, ... }: { { config, ... }: {
sops.secrets."wireguard/psk/rico2" = {
mode = "400";
owner = config.users.users.root.name;
group = config.users.users.root.group;
};
networking.firewall.trustedInterfaces = [ "wg0" ]; networking.firewall.trustedInterfaces = [ "wg0" ];
networking.wireguard = { networking.wireguard = {
enable = true; enable = true;

5
hosts/skipper/wireguard.nix
View file

@ -1,4 +1,9 @@
{ config, ... }: { { config, ... }: {
sops.secrets."wireguard/psk/skipper" = {
mode = "400";
owner = config.users.users.root.name;
group = config.users.users.root.group;
};
networking.firewall.trustedInterfaces = [ "wg0" ]; networking.firewall.trustedInterfaces = [ "wg0" ];
networking.wireguard = { networking.wireguard = {
enable = true; enable = true;