muon/flake
1
0
Fork 0
mirror of https://codeberg.org/muon/home.git synced 2025-12-06 08:07:45 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Add persist key

Browse source
This commit is contained in:
muon 2025-07-31 23:01:17 +00:00
parent 800e05c744
commit 33743a121c
3 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
README.md
View file

@ -20,7 +20,7 @@ rbw get sops > /mnt/var/lib/sops-nix/key.txt
sudo nixos-install --root /mnt --no-root-passwd --flake .#$(hostname) sudo nixos-install --root /mnt --no-root-passwd --flake .#$(hostname)
sudo mkdir -p /mnt/persist/var/lib/sops-nix sudo mkdir -p /mnt/persist/var/lib/sops-nix
sudo cp -r /mnt/var/lib/nixos/* /mnt/persist/var/lib/nixos/ sudo cp -r /mnt/var/lib/nixos/* /mnt/persist/var/lib/nixos/
sudo cp -r /mnt/etc/ssh/* /mnt/persist/etc/ssh/ sudo cp -r /mnt/etc/ssh/ssh_host* /mnt/persist/etc/ssh/
sudo cp {/mnt,/mnt/persist}/var/lib/sops-nix/key.txt sudo cp {/mnt,/mnt/persist}/var/lib/sops-nix/key.txt
sudo cp {/mnt,/mnt/persist}/etc/machine-id sudo cp {/mnt,/mnt/persist}/etc/machine-id
``` ```

2
modules/home/sops/default.nix
View file

@ -3,7 +3,7 @@ let cfg = config.mods;
in with lib; { in with lib; {
imports = [ inputs.sops-nix.homeManagerModules.sops ]; imports = [ inputs.sops-nix.homeManagerModules.sops ];
sops = { sops = {
age.keyFile = "/var/lib/sops-nix/key.txt"; age.keyFile = "/persist/var/lib/sops-nix/key.txt";
defaultSopsFile = ./secrets.yaml; defaultSopsFile = ./secrets.yaml;
secrets.zipline-auth = { }; secrets.zipline-auth = { };
}; };

2
modules/nixos/sops/default.nix
View file

@ -3,7 +3,7 @@ let cfg = config.mods;
in with lib; { in with lib; {
imports = [ inputs.sops-nix.nixosModules.sops ]; imports = [ inputs.sops-nix.nixosModules.sops ];
sops = { sops = {
age.keyFile = "/var/lib/sops-nix/key.txt"; age.keyFile = "/persist/var/lib/sops-nix/key.txt";
defaultSopsFile = ./secrets.yaml; defaultSopsFile = ./secrets.yaml;
secrets.muon-password.neededForUsers = true; secrets.muon-password.neededForUsers = true;
secrets.zipline-secret = mkIf cfg.server.share.enable { secrets.zipline-secret = mkIf cfg.server.share.enable {