sops not working

This commit is contained in:
2026-03-25 09:57:53 +01:00
parent 097078172e
commit 2c122a248d
9 changed files with 20 additions and 59 deletions

11
builds/sops.nix Normal file
View File

@@ -0,0 +1,11 @@
{ ... }:
{
sops = {
defaultSopsFile = ../secrets/secrets.yaml;
defaultSopsFormat = "yaml";
age.keyFile = "/etc/sops/keys.txt";
secrets."user_password".neededForUsers = true;
# secrets."git/email" = { };
};
}

View File

@@ -6,9 +6,9 @@ in
{ {
# ── Steam & Printer ─────────────────────────────────────────────────── # ── Steam & Printer ───────────────────────────────────────────────────
imports = [ imports = [
./builds/steam/default.nix ./builds/steam.nix
./home/extras/printer.nix ./builds/printer.nix
./home/extras/sops.nix ./builds/sops.nix
]; ];
# ── Use the systemd-boot EFI boot loader. ───────────────────────────── # ── Use the systemd-boot EFI boot loader. ─────────────────────────────
@@ -99,7 +99,7 @@ in
"render" "render"
"adbusers" "adbusers"
]; ];
hashedPassword = config.sops.secrets.user_password.path; hashedPassword = config.sops.secrets."user_password".path;
}; };
}; };

View File

@@ -69,9 +69,6 @@
./home/default-laptop.nix ./home/default-laptop.nix
catppuccin.homeModules.catppuccin catppuccin.homeModules.catppuccin
]; ];
sharedModules = [
inputs.sops-nix.homeManagerModules.sops
];
}; };
nixpkgs.overlays = [ nixpkgs.overlays = [
# (import ./overlays/river-status.nix) # (import ./overlays/river-status.nix)
@@ -98,33 +95,6 @@
users.elias.imports = [ users.elias.imports = [
./home/default-desktop.nix ./home/default-desktop.nix
catppuccin.homeModules.catppuccin catppuccin.homeModules.catppuccin
sops-nix.homeManagerModules.sops
];
};
nixpkgs.overlays = [
inputs.nur.overlays.default
inputs.nix-vscode-extensions.overlays.default
];
}
];
};
nixos = nixpkgs.lib.nixosSystem {
system = "x86_64-linux";
modules = [
./machines/configuration-desktop.nix
./home/services/pipewire.nix
nur.modules.nixos.default
catppuccin.nixosModules.catppuccin
home-manager.nixosModules.home-manager
# impermanence.nixosModules.impermanence
{
home-manager = {
useUserPackages = true;
extraSpecialArgs = { inherit inputs; };
users.elias.imports = [
./home/default-desktop.nix
catppuccin.homeModules.catppuccin
sops-nix.homeManagerModules.sops
]; ];
}; };
nixpkgs.overlays = [ nixpkgs.overlays = [

View File

@@ -46,9 +46,9 @@
firefox firefox
bitwarden-desktop bitwarden-desktop
# sops # Sops
sops
age age
sops
]; ];
stateVersion = "23.11"; stateVersion = "23.11";

View File

@@ -1,9 +0,0 @@
{ ... }:
{
sops = {
defaultSopsFile = "./secrets/secrets.yaml";
defaultSopsFormat = "yaml";
age.keyFile = "/etc/sops/keys.txt";
};
}

View File

@@ -1,10 +0,0 @@
{ config, ... }:
{
sops = {
defaultSopsFile = "./secrets/secrets.yaml";
defaultSopsFormat = "yaml";
age.keyFile = "/etc/sops/keys.txt";
secrets.user_password.neededForUsers = true;
};
}

View File

@@ -1,5 +1,4 @@
{ {
config,
lib, lib,
pkgs, pkgs,
... ...
@@ -20,12 +19,12 @@
defaultBranch = "main"; defaultBranch = "main";
}; };
user = { user = {
email = config.sops.secrets.git.email.path; email = "elias.schroeter@e.email";
name = config.sops.secrets.git.name.path; name = "Elias Schröter";
}; };
}; };
signing = { signing = {
key = config.sops.secrets.git.signingkey.path; key = "04F3A2ED4B33F254";
format = lib.mkForce "openpgp"; format = lib.mkForce "openpgp";
signByDefault = true; signByDefault = true;
}; };