sokai/mynixos-config
1
1
Fork 0
forked from mirrors_public/oddlama_nix-config
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: implement repository-wide secrets

Browse source
This commit is contained in:
oddlama 2023-03-14 23:55:59 +01:00
parent efa04063e6
commit b03c913349
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
9 changed files with 130 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

6
modules/core/default.nix
View file

@ -77,12 +77,6 @@ in {
users.mutableUsers = false;
# Setup to use Secrets
rekey.forceRekeyOnSystem = "x86_64-linux";
rekey.hostPubkey = ../../secrets/pubkeys + "/${config.networking.hostName}.pub";
rekey.masterIdentities = [../../secrets/yk1-nix-rage.pub];
rekey.extraEncryptionPubkeys = [../../secrets/backup.pub];
home-manager = {
useGlobalPkgs = true;
useUserPackages = true;

4
modules/core/nix.nix
View file

@ -1,4 +1,4 @@
{
{pkgs, ...}: {
nix = {
settings = {
auto-optimise-store = true;
@ -23,6 +23,8 @@
builders-use-substitutes = true
experimental-features = nix-command flakes recursive-nix
flake-registry = /etc/nix/registry.json
plugin-files = ${pkgs.nix-plugins}/lib/nix/plugins
extra-builtins-file = ${../../nix/extra-builtins.nix}
'';
optimise.automatic = true;
gc.automatic = true;