commit 93cd9620ddc80712930afc37a8c88f300091ea60 · ptr.pet/ark

+44

flake.lock

···

       1
       1
        
       {

     

       2
       2
        
         "nodes": {

     

       3
       3
       +
           "agenix": {

     

       4
       4
       +
             "inputs": {

     

       5
       5
       +
               "darwin": "darwin",

     

       6
       6
       +
               "nixpkgs": [

     

       7
       7
       +
                 "nixpkgs"

     

       8
       8
       +
               ]

     

       9
       9
       +
             },

     

       10
       10
       +
             "locked": {

     

       11
       11
       +
               "lastModified": 1682101079,

     

       12
       12
       +
               "narHash": "sha256-MdAhtjrLKnk2uiqun1FWABbKpLH090oeqCSiWemtuck=",

     

       13
       13
       +
               "owner": "ryantm",

     

       14
       14
       +
               "repo": "agenix",

     

       15
       15
       +
               "rev": "2994d002dcff5353ca1ac48ec584c7f6589fe447",

     

       16
       16
       +
               "type": "github"

     

       17
       17
       +
             },

     

       18
       18
       +
             "original": {

     

       19
       19
       +
               "owner": "ryantm",

     

       20
       20
       +
               "repo": "agenix",

     

       21
       21
       +
               "type": "github"

     

       22
       22
       +
             }

     

       23
       23
       +
           },

     

       3
       24
        
           "all-cabal-json": {

     

       4
       25
        
             "flake": false,

     

       5
       26
        
             "locked": {

     
···

       186
       207
        
             "original": {

     

       187
       208
        
               "owner": "ipetkov",

     

       188
       209
        
               "repo": "crane",

     

       210
       210
       +
               "type": "github"

     

       211
       211
       +
             }

     

       212
       212
       +
           },

     

       213
       213
       +
           "darwin": {

     

       214
       214
       +
             "inputs": {

     

       215
       215
       +
               "nixpkgs": [

     

       216
       216
       +
                 "agenix",

     

       217
       217
       +
                 "nixpkgs"

     

       218
       218
       +
               ]

     

       219
       219
       +
             },

     

       220
       220
       +
             "locked": {

     

       221
       221
       +
               "lastModified": 1673295039,

     

       222
       222
       +
               "narHash": "sha256-AsdYgE8/GPwcelGgrntlijMg4t3hLFJFCRF3tL5WVjA=",

     

       223
       223
       +
               "owner": "lnl7",

     

       224
       224
       +
               "repo": "nix-darwin",

     

       225
       225
       +
               "rev": "87b9d090ad39b25b2400029c64825fc2a8868943",

     

       226
       226
       +
               "type": "github"

     

       227
       227
       +
             },

     

       228
       228
       +
             "original": {

     

       229
       229
       +
               "owner": "lnl7",

     

       230
       230
       +
               "ref": "master",

     

       231
       231
       +
               "repo": "nix-darwin",

     

       189
       232
        
               "type": "github"

     

       190
       233
        
             }

     

       191
       234
        
           },

     
···

       925
       968
        
           },

     

       926
       969
        
           "root": {

     

       927
       970
        
             "inputs": {

     

       971
       971
       +
               "agenix": "agenix",

     

       928
       972
        
               "bernbot": "bernbot",

     

       929
       973
        
               "blender-bin": "blender-bin",

     

       930
       974
        
               "blog": "blog",

+3

flake.nix

···

       41
       41
        
           vscode-extensions.url = "github:nix-community/nix-vscode-extensions";

     

       42
       42
        
           vscode-extensions.inputs.nixpkgs.follows = "nixpkgs";

     

       43
       43
        
       

     

       44
       44
       +
           agenix.url = "github:ryantm/agenix";

     

       45
       45
       +
           agenix.inputs.nixpkgs.follows = "nixpkgs";

     

       46
       46
       +
       

     

       44
       47
        
           # needed for hyprland setup

     

       45
       48
        
           # hyprland.url = "github:hyprwm/Hyprland";

     

       46
       49
        
           # hyprland.inputs.nixpkgs.follows = "nixpkgs";

+1

hosts/tkaronto/default.nix

···

       9
       9
        
         imports = with inputs;

     

       10
       10
        
         with nixos-hardware.nixosModules;

     

       11
       11
        
           [

     

       12
       12
       +
             inputs.agenix.nixosModules.default

     

       12
       13
        
             nixpkgs.nixosModules.notDetected

     

       13
       14
        
             nixos-persistence.nixosModule

     

       14
       15
        
             common-pc-ssd

+5

hosts/tkaronto/modules/nix.nix

···

       1
       1
       +
       {config, ...}: {

     

       2
       2
       +
         nix.extraOptions = ''

     

       3
       3
       +
           !include ${config.age.secrets.nixGithubAccessToken.path}

     

       4
       4
       +
         '';

     

       5
       5
       +
       }

+4

hosts/tkaronto/modules/secrets.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         age.secrets.nixGithubAccessToken.file = ../../../secrets/nixGithubAccessToken.age;

     

       3
       3
       +
         age.secrets.wgServerPrivateKey.file = ../../../secrets/wgServerPrivateKey.age;

     

       4
       4
       +
       }

+11

hosts/tkaronto/modules/wireguard.nix

···

       1
       1
       +
       {config, ...}: {

     

       2
       2
       +
         networking.wireguard.enable = true;

     

       3
       3
       +
         networking.wireguard.interfaces."wg0" = {

     

       4
       4
       +
           privateKeyFile = config.age.secrets.wgServerPrivateKey.path;

     

       5
       5
       +
           peers = [{

     

       6
       6
       +
             publicKey = import ./wgProxyPublicKey.key.pub;

     

       7
       7
       +
             allowedIPs = ["10.99.0.1/32"];

     

       8
       8
       +
             endpoint = "${import ./wgProxyPublicIp}:51820";

     

       9
       9
       +
           }];

     

       10
       10
       +
         };

     

       11
       11
       +
       }

+4 -5

hosts/wolumonde/default.nix

···

       1
       1
        
       {

     

       2
       2
        
         inputs,

     

       3
       3
       -
         pkgs,

     

       4
       4
       -
         config,

     

       5
       5
       -
         lib,

     

       6
       3
        
         tlib,

     

       7
       4
        
         ...

     

       8
       8
       -
       }: {

     

       9
       9
       -
         imports = tlib.importFolder (toString ./modules);

     

       5
       5
       +
       }: { 

     

       6
       6
       +
         imports = [

     

       7
       7
       +
           inputs.agenix.nixosModules.default

     

       8
       8
       +
         ] ++ (tlib.importFolder (toString ./modules));

     

       10
       9
        
       

     

       11
       10
        
         boot.cleanTmpDir = true;

     

       12
       11
        
         zramSwap.enable = true;

+4

hosts/wolumonde/modules/secrets.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         age.secrets.bernbotToken.file = ../../../secrets/bernbotToken.age;

     

       3
       3
       +
         age.secrets.wgProxyPrivateKey.file = ../../../secrets/wgProxyPrivateKey.age;

     

       4
       4
       +
       }

+11

hosts/wolumonde/modules/wireguard.nix

···

       1
       1
       +
       {config, ...}: {

     

       2
       2
       +
         networking.wireguard.enable = true;

     

       3
       3
       +
         networking.wireguard.interfaces."wg0" = {

     

       4
       4
       +
           listenPort = 51820;

     

       5
       5
       +
           privateKeyFile = config.age.secrets.wgProxyPrivateKey.path;

     

       6
       6
       +
           peers = [{

     

       7
       7
       +
             publicKey = import ./wgServerPublicKey.key.pub;

     

       8
       8
       +
             allowedIPs = ["10.99.0.2/32"];

     

       9
       9
       +
           }];

     

       10
       10
       +
         };

     

       11
       11
       +
       }

-2

modules/base/nix.nix

···

       2
       2
        
         pkgs,

     

       3
       3
        
         lib,

     

       4
       4
        
         inputs,

     

       5
       5
       -
         config,

     

       6
       5
        
         ...

     

       7
       6
        
       }: {

     

       8
       7
        
         nix = {

     
···

       20
       19
        
             fallback = true

     

       21
       20
        
             extra-experimental-features = nix-command flakes

     

       22
       21
        
             builders-use-substitutes = true

     

       23
       23
       -
             netrc-file = /etc/nix/netrc

     

       24
       22
        
           '';

     

       25
       23
        
           nixPath = ["nixpkgs=${inputs.nixpkgs}" "home-manager=${inputs.home}"];

     

       26
       24
        
         };

+3

pkgs-set/overlays/agenix.nix

···

       1
       1
       +
       {inputs}: final: prev: {

     

       2
       2
       +
         agenix = inputs.agenix.packages."${final.system}".agenix;

     

       3
       3
       +
       }

secrets/secrets.nix

This is a binary file and will not be displayed.

-1

secrets/ssh-key.pub

···

       1
       1
       -
       ssh-rsa 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 openpgp:0xDE3C8FCD

secrets/wolumonde.key.pub

This is a binary file and will not be displayed.

secrets/yusdacra.key.pub

This is a binary file and will not be displayed.

+1 -1

shells/default.nix

···

       3
       3
        
         default = with pkgs;

     

       4
       4
        
           mkShell {

     

       5
       5
        
             name = "prts";

     

       6
       6
       -
             buildInputs = [git git-crypt alejandra helix];

     

       6
       6
       +
             buildInputs = [git git-crypt alejandra helix agenix];

     

       7
       7
        
             shellHook = "echo \"$(tput bold)welcome to PRTS, $USER$(tput sgr0)\"";

     

       8
       8
        
           };

     

       9
       9
        
       })