commit d75ae13cef0dda713f3b70e1c89a1a0dce35ad49 · kitten.sh/system

+4 -4

flake.lock

···

       1039
       1039
        
               "sqlite-lib-src": "sqlite-lib-src"

     

       1040
       1040
        
             },

     

       1041
       1041
        
             "locked": {

     

       1042
       1042
       -
               "lastModified": 1755521231,

     

       1043
       1043
       -
               "narHash": "sha256-DmOKT1H/A+viByvtkV53YcRYlYODh5dvy7CfM/73cDs=",

     

       1042
       1042
       +
               "lastModified": 1756753599,

     

       1043
       1043
       +
               "narHash": "sha256-yD8PMlRjUI2sN5PvkDJRfGz96zCp4gejaguDVmZ4utg=",

     

       1044
       1044
        
               "ref": "refs/heads/master",

     

       1045
       1045
       -
               "rev": "12a8c093e27c5a95b281908f43982f49624f9959",

     

       1046
       1046
       -
               "revCount": 1174,

     

       1045
       1045
       +
               "rev": "da3540c0c134331c10f1a8d124ee0925e57f8112",

     

       1046
       1046
       +
               "revCount": 1279,

     

       1047
       1047
        
               "type": "git",

     

       1048
       1048
        
               "url": "ssh://git@tangled.sh/tangled.sh/core"

     

       1049
       1049
        
             },

-5

modules/server/encrypt/tangled-knot-secret.age

···

       1
       1
       -
       age-encryption.org/v1

     

       2
       2
       -
       -> ssh-ed25519 QwbpPw 33WczOs4JEiVVA8CzFii7hWMA+N2FxeMj0ya1JHim1A

     

       3
       3
       -
       kfxuJo5DLQJ0vZ6P3ubiadIb0nO3YFFdiMGsTCG00N4

     

       4
       4
       -
       --- M5dUQ19fOQdclRb1kt0DbAv8BrFMih+Uy2dlxskeVzg

     

       5
       5
       -
       �S*ɀ�!Q]�T�����^�C��-X��Tҕ�r�^��D�m�잫�aD��;k�t@��/��i����A��A��A@I���Ù�8�����E=^���>����B^۰�):�

+6 -10

modules/server/tangled.nix

···

       13
       13
        
             type = types.bool;

     

       14
       14
        
           };

     

       15
       15
        
       

     

       16
       16
       +
           owner = mkOption {

     

       17
       17
       +
             default = "did:plc:726afsuwa5x6qaytybar3bfs";

     

       18
       18
       +
             type = types.str;

     

       19
       19
       +
           };

     

       20
       20
       +
       

     

       16
       21
        
           hostname = mkOption {

     

       17
       22
        
             default = "knot.kitten.sh";

     

       18
       23
        
             type = types.str;

     
···

       20
       25
        
         };

     

       21
       26
        
       

     

       22
       27
        
         config = mkIf (cfg.enable && cfg.tangled.enable) {

     

       23
       23
       -
           age.secrets."tangled-knot" = let

     

       24
       24
       -
             inherit (config.services.tangled-knot) gitUser;

     

       25
       25
       -
           in {

     

       26
       26
       -
             file = ./encrypt/tangled-knot-secret.age;

     

       27
       27
       -
             owner = gitUser;

     

       28
       28
       -
             group = gitUser;

     

       29
       29
       -
             mode = "0440";

     

       30
       30
       -
           };

     

       31
       31
       -
       

     

       32
       28
        
           services.tangled-knot = {

     

       33
       29
        
             enable = true;

     

       34
       30
        
             openFirewall = true;

     

       35
       31
        
             server = {

     

       36
       32
        
               hostname = cfg.tangled.hostname;

     

       37
       33
        
               listenAddr = "127.0.0.1:5555";

     

       38
       38
       -
               secretFile = config.age.secrets."tangled-knot".path;

     

       34
       34
       +
               owner = cfg.tangled.owner;

     

       39
       35
        
             };

     

       40
       36
        
           };

     

       41
       37
        
         };

-1

secrets.nix

···

       8
       8
        
       

     

       9
       9
        
         "./modules/server/encrypt/tailscale.age".publicKeys = keys;

     

       10
       10
        
         "./modules/server/encrypt/rclone.conf.age".publicKeys = keys;

     

       11
       11
       -
         "./modules/server/encrypt/tangled-knot-secret.age".publicKeys = keys;

     

       12
       11
        
         "./modules/server/encrypt/tangled-knot-ssh.age".publicKeys = keys;

     

       13
       12
        
       

     

       14
       13
        
         "./home/fonts/encrypt/DankMono-Regular.otf.age".publicKeys = keys;