From 3081546a585b6cce3e3f640cfb6513b23119d05f Mon Sep 17 00:00:00 2001 From: DashieTM Date: Sun, 4 Aug 2024 16:33:48 +0200 Subject: [PATCH] Configure access token for server --- hardware/server/configuration.nix | 15 +++++++++++++++ programs/common.nix | 1 + 2 files changed, 16 insertions(+) diff --git a/hardware/server/configuration.nix b/hardware/server/configuration.nix index bb51cdf..80ea660 100644 --- a/hardware/server/configuration.nix +++ b/hardware/server/configuration.nix @@ -323,4 +323,19 @@ in hardware.cpu.intel.updateMicrocode = true; system.stateVersion = "24.05"; + + nix = { + extraOptions = '' + !include ${config.sops.secrets.access.path} + ''; + }; + + sops = { + gnupg = { + home = "~/.gnupg"; + sshKeyPaths = [ ]; + }; + defaultSopsFile = ../secrets/secrets.yaml; + secrets.access = { }; + }; } diff --git a/programs/common.nix b/programs/common.nix index ccd5746..1cd99fb 100644 --- a/programs/common.nix +++ b/programs/common.nix @@ -36,6 +36,7 @@ in enable = true; enableFishIntegration = true; }; + nix = { extraOptions = '' !include ${config.sops.secrets.access.path}