moving to john-pc
This commit is contained in:
@@ -3,11 +3,8 @@ let
|
||||
username = "john";
|
||||
hostname = "john-pc-ubuntu";
|
||||
|
||||
# testTarget = "fded:fb16:653e:25da:be24:11ff:fe89:1cc3"; # soteria
|
||||
# testTarget = "fded:fb16:653e:25da:be24:11ff:fea0:753f"; # test-nix
|
||||
testHost = "soteria"; # which host to test build
|
||||
testTarget = "test-nix";
|
||||
|
||||
in
|
||||
{
|
||||
flake.modules.homeManager."${hostname}" = { config, pkgs, lib, ... }:
|
||||
@@ -41,11 +38,7 @@ in
|
||||
home.packages = with pkgs; [
|
||||
nil # Nix language server
|
||||
selfPkgs.jsl-zsh
|
||||
# selfPkgs.my-neovim
|
||||
selfPkgs.ssh-certs
|
||||
# selfPkgs.step-bootstrap
|
||||
# selfPkgs.wg-platform
|
||||
# self'.packages.myWrappedPackage
|
||||
# selfPkgs.ssh-certs
|
||||
(inputs.self.wrappers.test-push.apply {
|
||||
inherit pkgs flakeDir;
|
||||
host = testHost;
|
||||
@@ -56,20 +49,27 @@ in
|
||||
homeManagerFlakeDir = flakeDir;
|
||||
docker.enable = true;
|
||||
|
||||
ssh = {
|
||||
certificates.enable = true;
|
||||
knownHosts = [
|
||||
"@cert-authority fded:fb16:653e:25da:be24:11ff:* ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBNug18oLH0vZxnibXJzMJvTWFPZTnSlhCDDVi+rHhgnIum6ZXQ4SF+VHOOAM5BbzZmMKitNJ5lcrGP15Eur7DzQ="
|
||||
];
|
||||
matchSets = {
|
||||
certs = true;
|
||||
appdaemon = true;
|
||||
homelab = true;
|
||||
dev = true;
|
||||
tailscale = true;
|
||||
};
|
||||
programs.ssh.settings."*" = {
|
||||
IdentityAgent = "${config.home.homeDirectory}/.1password/agent.sock";
|
||||
};
|
||||
|
||||
ssh-new = {
|
||||
certificates.enable = true;
|
||||
};
|
||||
# ssh = {
|
||||
# certificates.enable = true;
|
||||
# knownHosts = [
|
||||
# "@cert-authority fded:fb16:653e:25da:be24:11ff:* ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBNug18oLH0vZxnibXJzMJvTWFPZTnSlhCDDVi+rHhgnIum6ZXQ4SF+VHOOAM5BbzZmMKitNJ5lcrGP15Eur7DzQ="
|
||||
# ];
|
||||
# matchSets = {
|
||||
# certs = true;
|
||||
# appdaemon = true;
|
||||
# homelab = true;
|
||||
# dev = true;
|
||||
# tailscale = true;
|
||||
# };
|
||||
# };
|
||||
|
||||
# This provides the keys at build time and will be included in the nix store
|
||||
sops.defaultSopsFile = ../../../keys/secrets.yaml;
|
||||
|
||||
|
||||
Reference in New Issue
Block a user