❄️ Dotfiles for our NixOS system configuration.

feat: secret management (wip)

Chloe b51c435e 64dea74b

Changed files
+193 -5
modules
+183 -5
flake.lock
···
{
"nodes": {
+
"agenix": {
+
"inputs": {
+
"darwin": "darwin",
+
"home-manager": "home-manager_2",
+
"nixpkgs": [
+
"ragenix",
+
"nixpkgs"
+
],
+
"systems": "systems"
+
},
+
"locked": {
+
"lastModified": 1761656077,
+
"narHash": "sha256-lsNWuj4Z+pE7s0bd2OKicOFq9bK86JE0ZGeKJbNqb94=",
+
"owner": "ryantm",
+
"repo": "agenix",
+
"rev": "9ba0d85de3eaa7afeab493fed622008b6e4924f5",
+
"type": "github"
+
},
+
"original": {
+
"owner": "ryantm",
+
"repo": "agenix",
+
"type": "github"
+
}
+
},
"catppuccin": {
"inputs": {
"nixpkgs": [
···
"type": "github"
}
},
+
"crane": {
+
"locked": {
+
"lastModified": 1760924934,
+
"narHash": "sha256-tuuqY5aU7cUkR71sO2TraVKK2boYrdW3gCSXUkF4i44=",
+
"owner": "ipetkov",
+
"repo": "crane",
+
"rev": "c6b4d5308293d0d04fcfeee92705017537cad02f",
+
"type": "github"
+
},
+
"original": {
+
"owner": "ipetkov",
+
"repo": "crane",
+
"type": "github"
+
}
+
},
+
"darwin": {
+
"inputs": {
+
"nixpkgs": [
+
"ragenix",
+
"agenix",
+
"nixpkgs"
+
]
+
},
+
"locked": {
+
"lastModified": 1744478979,
+
"narHash": "sha256-dyN+teG9G82G+m+PX/aSAagkC+vUv0SgUw3XkPhQodQ=",
+
"owner": "lnl7",
+
"repo": "nix-darwin",
+
"rev": "43975d782b418ebf4969e9ccba82466728c2851b",
+
"type": "github"
+
},
+
"original": {
+
"owner": "lnl7",
+
"ref": "master",
+
"repo": "nix-darwin",
+
"type": "github"
+
}
+
},
"easy-hosts": {
"locked": {
"lastModified": 1755470564,
···
},
"flake-utils": {
"inputs": {
-
"systems": "systems"
+
"systems": "systems_2"
},
"locked": {
-
"lastModified": 1694529238,
-
"narHash": "sha256-zsNZZGTGnMOf9YpHKJqMSsa0dXbfmxeoJ7xHlrt+xmY=",
+
"lastModified": 1731533236,
+
"narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=",
"owner": "numtide",
"repo": "flake-utils",
-
"rev": "ff7b65b44d01cf9ba6a71320833626af21126384",
+
"rev": "11707dc2f618dd54ca8739b309ec4fc024de578b",
"type": "github"
},
"original": {
···
},
"flake-utils-plus": {
"inputs": {
-
"flake-utils": "flake-utils"
+
"flake-utils": "flake-utils_2"
},
"locked": {
"lastModified": 1715533576,
···
"type": "github"
}
},
+
"flake-utils_2": {
+
"inputs": {
+
"systems": "systems_3"
+
},
+
"locked": {
+
"lastModified": 1694529238,
+
"narHash": "sha256-zsNZZGTGnMOf9YpHKJqMSsa0dXbfmxeoJ7xHlrt+xmY=",
+
"owner": "numtide",
+
"repo": "flake-utils",
+
"rev": "ff7b65b44d01cf9ba6a71320833626af21126384",
+
"type": "github"
+
},
+
"original": {
+
"owner": "numtide",
+
"repo": "flake-utils",
+
"type": "github"
+
}
+
},
"home-manager": {
"inputs": {
"nixpkgs": [
···
"type": "github"
}
},
+
"home-manager_2": {
+
"inputs": {
+
"nixpkgs": [
+
"ragenix",
+
"agenix",
+
"nixpkgs"
+
]
+
},
+
"locked": {
+
"lastModified": 1745494811,
+
"narHash": "sha256-YZCh2o9Ua1n9uCvrvi5pRxtuVNml8X2a03qIFfRKpFs=",
+
"owner": "nix-community",
+
"repo": "home-manager",
+
"rev": "abfad3d2958c9e6300a883bd443512c55dfeb1be",
+
"type": "github"
+
},
+
"original": {
+
"owner": "nix-community",
+
"repo": "home-manager",
+
"type": "github"
+
}
+
},
"nil": {
"inputs": {
"nixpkgs": [
···
"type": "github"
}
},
+
"ragenix": {
+
"inputs": {
+
"agenix": "agenix",
+
"crane": "crane",
+
"flake-utils": "flake-utils",
+
"nixpkgs": [
+
"nixpkgs"
+
],
+
"rust-overlay": "rust-overlay"
+
},
+
"locked": {
+
"lastModified": 1761832913,
+
"narHash": "sha256-VCNVjjuRvrKPiYYwqhE3BAKIaReiKXGpxGp27lZ0MFM=",
+
"owner": "yaxitech",
+
"repo": "ragenix",
+
"rev": "83bccfdea758241999f32869fb6b36f7ac72f1ac",
+
"type": "github"
+
},
+
"original": {
+
"owner": "yaxitech",
+
"repo": "ragenix",
+
"type": "github"
+
}
+
},
"root": {
"inputs": {
"catppuccin": "catppuccin",
···
"nix-darwin": "nix-darwin",
"nixos-wsl": "nixos-wsl",
"nixpkgs": "nixpkgs",
+
"ragenix": "ragenix",
"solaar": "solaar"
}
},
+
"rust-overlay": {
+
"inputs": {
+
"nixpkgs": [
+
"ragenix",
+
"nixpkgs"
+
]
+
},
+
"locked": {
+
"lastModified": 1761791894,
+
"narHash": "sha256-myRIDh+PxaREz+z9LzbqBJF+SnTFJwkthKDX9zMyddY=",
+
"owner": "oxalica",
+
"repo": "rust-overlay",
+
"rev": "59c45eb69d9222a4362673141e00ff77842cd219",
+
"type": "github"
+
},
+
"original": {
+
"owner": "oxalica",
+
"repo": "rust-overlay",
+
"type": "github"
+
}
+
},
"snowfall-lib": {
"inputs": {
"flake-compat": "flake-compat_3",
···
}
},
"systems": {
+
"locked": {
+
"lastModified": 1681028828,
+
"narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+
"owner": "nix-systems",
+
"repo": "default",
+
"rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+
"type": "github"
+
},
+
"original": {
+
"owner": "nix-systems",
+
"repo": "default",
+
"type": "github"
+
}
+
},
+
"systems_2": {
+
"locked": {
+
"lastModified": 1681028828,
+
"narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+
"owner": "nix-systems",
+
"repo": "default",
+
"rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+
"type": "github"
+
},
+
"original": {
+
"owner": "nix-systems",
+
"repo": "default",
+
"type": "github"
+
}
+
},
+
"systems_3": {
"locked": {
"lastModified": 1681028828,
"narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+6
flake.nix
···
inputs.nixpkgs.follows = "nixpkgs";
};
+
## Secrets management
+
ragenix = {
+
url = "github:yaxitech/ragenix";
+
inputs.nixpkgs.follows = "nixpkgs";
+
};
+
## Logitech config tool
solaar = {
url = "github:Svenum/Solaar-Flake/main";
+3
modules/nixos/extras.nix
···
{
imports = [
inputs.home-manager.nixosModules.home-manager
+
inputs.ragenix.nixosModules.default
];
+
+
age.identityPaths = [ "/home/chloe/.ssh/id_ed25519" ];
}
+1
modules/nixos/packages.nix
···
{
environment.systemPackages = with pkgs; [
gparted
+
ragenix
];
}