sops not working

This commit is contained in:
2026-03-25 09:57:53 +01:00
parent 097078172e
commit 2c122a248d
9 changed files with 20 additions and 59 deletions

11
builds/sops.nix Normal file
View File

@@ -0,0 +1,11 @@
{ ... }:
{
sops = {
defaultSopsFile = ../secrets/secrets.yaml;
defaultSopsFormat = "yaml";
age.keyFile = "/etc/sops/keys.txt";
secrets."user_password".neededForUsers = true;
# secrets."git/email" = { };
};
}

View File

@@ -6,9 +6,9 @@ in
{
# ── Steam & Printer ───────────────────────────────────────────────────
imports = [
./builds/steam/default.nix
./home/extras/printer.nix
./home/extras/sops.nix
./builds/steam.nix
./builds/printer.nix
./builds/sops.nix
];
# ── Use the systemd-boot EFI boot loader. ─────────────────────────────
@@ -99,7 +99,7 @@ in
"render"
"adbusers"
];
hashedPassword = config.sops.secrets.user_password.path;
hashedPassword = config.sops.secrets."user_password".path;
};
};

View File

@@ -69,9 +69,6 @@
./home/default-laptop.nix
catppuccin.homeModules.catppuccin
];
sharedModules = [
inputs.sops-nix.homeManagerModules.sops
];
};
nixpkgs.overlays = [
# (import ./overlays/river-status.nix)
@@ -98,33 +95,6 @@
users.elias.imports = [
./home/default-desktop.nix
catppuccin.homeModules.catppuccin
sops-nix.homeManagerModules.sops
];
};
nixpkgs.overlays = [
inputs.nur.overlays.default
inputs.nix-vscode-extensions.overlays.default
];
}
];
};
nixos = nixpkgs.lib.nixosSystem {
system = "x86_64-linux";
modules = [
./machines/configuration-desktop.nix
./home/services/pipewire.nix
nur.modules.nixos.default
catppuccin.nixosModules.catppuccin
home-manager.nixosModules.home-manager
# impermanence.nixosModules.impermanence
{
home-manager = {
useUserPackages = true;
extraSpecialArgs = { inherit inputs; };
users.elias.imports = [
./home/default-desktop.nix
catppuccin.homeModules.catppuccin
sops-nix.homeManagerModules.sops
];
};
nixpkgs.overlays = [

View File

@@ -46,9 +46,9 @@
firefox
bitwarden-desktop
# sops
sops
# Sops
age
sops
];
stateVersion = "23.11";

View File

@@ -1,9 +0,0 @@
{ ... }:
{
sops = {
defaultSopsFile = "./secrets/secrets.yaml";
defaultSopsFormat = "yaml";
age.keyFile = "/etc/sops/keys.txt";
};
}

View File

@@ -1,10 +0,0 @@
{ config, ... }:
{
sops = {
defaultSopsFile = "./secrets/secrets.yaml";
defaultSopsFormat = "yaml";
age.keyFile = "/etc/sops/keys.txt";
secrets.user_password.neededForUsers = true;
};
}

View File

@@ -1,5 +1,4 @@
{
config,
lib,
pkgs,
...
@@ -20,12 +19,12 @@
defaultBranch = "main";
};
user = {
email = config.sops.secrets.git.email.path;
name = config.sops.secrets.git.name.path;
email = "elias.schroeter@e.email";
name = "Elias Schröter";
};
};
signing = {
key = config.sops.secrets.git.signingkey.path;
key = "04F3A2ED4B33F254";
format = lib.mkForce "openpgp";
signByDefault = true;
};