sokai/mynixos-config
1
1
Fork 0
forked from mirrors_public/oddlama_nix-config
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: use flake-parts for agenix-rekey

Browse source
This commit is contained in:
oddlama 2024-05-29 15:19:10 +02:00
parent 78f79917f1
commit 6fd64972fa
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
4 changed files with 40 additions and 33 deletions
Download patch file Download diff file Expand all files Collapse all files

42
nix/agenix-rekey.nix
View file

@ -1,23 +1,37 @@
{inputs, ...}: {
flake = {config, ...}: {
{
inputs,
self,
...
}: {
imports = [
inputs.agenix-rekey.flakeModule
];
flake = {
# The identities that are used to rekey agenix secrets and to
# decrypt all repository-wide secrets.
secretsConfig = {
masterIdentities = [../secrets/yk1-nix-rage.pub];
extraEncryptionPubkeys = [../secrets/backup.pub];
};
agenix-rekey = inputs.agenix-rekey.configure {
userFlake = inputs.self;
inherit (config) nodes pkgs;
};
};
perSystem.devshells.default.env = [
{
# Always add files to git after agenix rekey and agenix generate.
name = "AGENIX_REKEY_ADD_TO_GIT";
value = "true";
}
];
perSystem = {config, ...}: {
agenix-rekey.nodes = self.nodes;
devshells.default = {
commands = [
{
inherit (config.agenix-rekey) package;
help = "Edit, generate and rekey secrets";
}
];
env = [
{
# Always add files to git after agenix rekey and agenix generate.
name = "AGENIX_REKEY_ADD_TO_GIT";
value = "true";
}
];
};
};
}