commit ce0c28952a3f3d9071c750f34588c88c8c6fa7a5 · ryan.freumh.org/nixos

+11 -2

hosts/owl/default.nix

···

       16
       16
        
           owner = "eon";

     

       17
       17
        
           group = "eon";

     

       18
       18
        
         };

     

       19
       19
       -
         services.eon.capnpSecretKeyFile = config.age.secrets.eon-capnp.path;

     

       20
       20
       -
         services.eon.prod = false;

     

       19
       19
       +
         age.secrets.eon-sirref-primary = {

     

       20
       20
       +
           file = ../../secrets/eon-sirref-primary.cap.age;

     

       21
       21
       +
           mode = "770";

     

       22
       22
       +
           owner = "eon";

     

       23
       23
       +
           group = "eon";

     

       24
       24
       +
         };

     

       25
       25
       +
         services.eon = {

     

       26
       26
       +
           capnpSecretKeyFile = config.age.secrets.eon-capnp.path;

     

       27
       27
       +
           primaries = [ config.age.secrets.eon-sirref-primary.path ];

     

       28
       28
       +
           prod = false;

     

       29
       29
       +
         };

     

       21
       30
        
       

     

       22
       31
        
         security.acme-eon = {

     

       23
       32
        
           acceptTerms = true;

secrets/eon-sirref-primary.cap.age

This is a binary file and will not be displayed.

+1

secrets/secrets.nix

···

       29
       29
        
         "headscale.age".publicKeys = user ++ [ owl ];

     

       30
       30
        
         "eon-capnp.age".publicKeys = user ++ [ owl ];

     

       31
       31
        
         "eon-vpn.freumh.org.cap.age".publicKeys = user ++ [ elephant ];

     

       32
       32
       +
         "eon-sirref-primary.cap.age".publicKeys = user ++ [ owl ];

     

       32
       33
        
       }