added nixos.sops module

This commit is contained in:
John Lancaster
2026-03-14 12:09:59 -05:00
parent 788fdbdf91
commit 0606e7c01b
2 changed files with 15 additions and 23 deletions

View File

@@ -4,35 +4,15 @@ let
hostname = "test-nix";
in
{
flake.modules.nixos."${hostname}" = { pkgs, lib, ...}: {
networking.hostName = "${hostname}";
services.openssh = {
enable = true;
# require public key authentication for better security
settings.PasswordAuthentication = false;
settings.KbdInteractiveAuthentication = false;
};
imports = with inputs.sops-nix.nixosModules; [
sops
];
sops.defaultSopsFile = ../../keys/secrets.yaml;
sops.secrets."test-nix/ssh_host_key" = {
owner = "john";
path = "/home/john/.ssh/host_key";
};
};
flake.nixosConfigurations."${hostname}" = inputs.nixpkgs.lib.nixosSystem {
modules = with inputs.self.modules; [
nixos."${hostname}"
nixos.lxc
nixos.sops
nixos.step-client
inputs.home-manager.nixosModules.home-manager
nixos."${username}"
nixos.zsh
nixos.docker
nixos.step-client
{
home-manager.users."${username}" = {
imports = with inputs.self.modules.homeManager; [

View File

@@ -9,7 +9,19 @@ in
sops-nix.url = "github:Mic92/sops-nix";
sops-nix.inputs.nixpkgs.follows = "nixpkgs";
};
flake.modules.nixos.sops = {
imports = with inputs.sops-nix.nixosModules; [
sops
];
sops.defaultSopsFile = ../../keys/secrets.yaml;
sops.secrets."test-nix/ssh_host_key" = {
owner = "john";
path = "/home/john/.ssh/host_key";
};
};
# Define the homeModules that are used by flake-parts
# https://flake.parts/options/home-manager.html#opt-flake.modules.homeManager
flake.modules.homeManager.sops = { inputs, config, pkgs, lib, ... }: