home/root/ginaz.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

{ inputs, lib, pkgs, config, outputs, ... }:
{

  home = {
    file = {
      "bin/knock".source = ../common/scripts/knock;
    };
  };

  imports = [
    common/core
  ];

  nix.extraOptions = ''
    !include /run/secrets/nix-access-token-github
  '';

  sops = {
    age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
    defaultSopsFile = ./secrets/ginaz.yaml;

    secrets = {
      "ssh_config" = {
        path = "/root/.ssh/config";
      };
    };
  };
}