1
1
Fork 1
mirror of https://github.com/oddlama/nix-config.git synced 2025-10-10 23:00:39 +02:00

feat: add public keys for secrets

This commit is contained in:
oddlama 2023-01-26 16:06:00 +01:00
parent c4f7c96bf0
commit 2a6e6c4ad1
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
5 changed files with 14 additions and 0 deletions

View file

@ -1,4 +1,5 @@
{pkgs, ...}: {
environment.systemPackages = with pkgs; [yubikey-manager yubikey-personalization age-plugin-yubikey];
services.udev.packages = with pkgs; [yubikey-personalization libu2f-host];
services.pcscd.enable = true;
}

1
secrets/backup.txt Normal file
View file

@ -0,0 +1 @@
age1dnljckavy0lz98s672faeh6rg62yu7qpgrx254yy7dxcnkaluvmq2erktc

4
secrets/recipients.txt Normal file
View file

@ -0,0 +1,4 @@
# backup
age1dnljckavy0lz98s672faeh6rg62yu7qpgrx254yy7dxcnkaluvmq2erktc
# yk1-nix-rage
age1yubikey1qgf2k486ctg6rs66mlm6wudwcwg6r5h5jme2cr3ympluyjl84dgkjxpzup9

7
secrets/yk1-nix-rage.txt Normal file
View file

@ -0,0 +1,7 @@
# Serial: 15209174, Slot: 1
# Name: YK1 Nix Rage
# Created: Thu, 26 Jan 2023 14:46:49 +0000
# PIN policy: Once (A PIN is required once per session, if set)
# Touch policy: Cached (A physical touch is required for decryption, and is cached for 15 seconds)
# Recipient: age1yubikey1qgf2k486ctg6rs66mlm6wudwcwg6r5h5jme2cr3ympluyjl84dgkjxpzup9
AGE-PLUGIN-YUBIKEY-16CFWSQYZC6JFAUGPQESMC

View file

@ -26,6 +26,7 @@
ripgrep
rsync
tree
rage
];
shellAliases = {
l = "ls -lahF --group-directories-first --show-control-chars --quoting-style=escape --color=auto";