martials/nixos-configuration
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

🔐 [pi4] Password defined in sops

Browse Source
This commit is contained in:
Martin Berg Alstad
2025-05-15 18:47:22 +00:00
parent 050741393b
commit 73e6462229
3 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
hosts/pi4/default.nix
View File

@ -24,7 +24,7 @@
mutableUsers = false; mutableUsers = false;
users.${systemConfig.username} = { users.${systemConfig.username} = {
isNormalUser = true; isNormalUser = true;
hashedPasswordFile = config.sops.secrets.password.path; hashedPasswordFile = config.sops.secrets.password-hash.path;
extraGroups = [ "wheel" ]; extraGroups = [ "wheel" ];
}; };
}; };

2
shared/modules/security/sops.nix
View File

@ -15,6 +15,6 @@
defaultSopsFormat = "yaml"; defaultSopsFormat = "yaml";
age.keyFile = "/home/${systemConfig.username}/.config/sops/age/keys.txt"; age.keyFile = "/home/${systemConfig.username}/.config/sops/age/keys.txt";
secrets.password.neededForUsers = true; secrets.password-hash.neededForUsers = true;
}; };
} }

6
shared/secrets/secrets.yaml
View File

@ -1,4 +1,4 @@
password: ENC[AES256_GCM,data:yc6aJ7TgEmerPVsy1SO7wY0RGwFvK8WtCRt5MI8wq/+J2gPCEORWtZkvWv7XvsjYruGmfFzdi8hgZ7kyuRnIGAx068/DF7O1Jg==,iv:99vwiYNKSvjHo4azzDGvWpbe6kfvwHVVliMLQGFRLkU=,tag:xfFZg/tI+apyksWsg44WRA==,type:str] password-hash: ENC[AES256_GCM,data:FsGHBAw/z4tcBRObVlo//UotWHyHns0+vdJVgt2lfGiIfQG+1I60g2Tzgv/O+gz3oz41NIwAYf61SR9AfXhpnc1AxiZRlCBwMQ==,iv:oiJndSVZQ+00UPz0TuJXV+T8x9mtecrNDUaablOGffU=,tag:wQuow7C8KqelJOE9KqCxMA==,type:str]
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
@ -32,8 +32,8 @@ sops:
SGdNMnVlQlNEeVJkWmZEM1FRT2JJMGMKbZ/znJM6tFhzhHariRXMLgH/4CRZZKrb SGdNMnVlQlNEeVJkWmZEM1FRT2JJMGMKbZ/znJM6tFhzhHariRXMLgH/4CRZZKrb
YtmSdeL/Pd5YIecCpjDHDn4vQ0TBAmLaX+zVbNbRKmMZoY7777ywfA== YtmSdeL/Pd5YIecCpjDHDn4vQ0TBAmLaX+zVbNbRKmMZoY7777ywfA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2025-04-20T17:38:05Z" lastmodified: "2025-05-15T16:57:17Z"
mac: ENC[AES256_GCM,data:mb1cr7ClV5E7+JJTW2J3eoMugISzjJoqJg7djkvowR89d3Aw+4K5+g+ayEr5aETCvJ4zt1L8XvCwi0auKF9d19fAZFNo+wju+zVw7rsprcfkqhvuxYKKa3YS8MvAr3V/swzDGSQYP2Ln9Aq1f5Wl/7TJ/HLzGddH/4dxHDiJ5tU=,iv:3OAs7Y4cziDKCD+Qu7eapyJv/wD+75xuFxrqC2QCiH0=,tag:5qdswVKhEz3pPeE4W+SMrg==,type:str] mac: ENC[AES256_GCM,data:HE/liIsb/7RazR671Keo5nH9+qp3BMPGxJcm97fzXkeO8TnCk/lNy43InKu7ON316G375F2oTeiuz90JthUYV2wBQFZTVWR6pROhRSewT7T3pp3lRPtIIwmvOmvJd537OVN1iz2p+1EgW4+gERrgQ9wPHWyyeFB7a9SkTeLmmGA=,iv:bvL1WyUHnnXB7gWZyVdru+j8oAFD11lbQkMvgWkgm24=,tag:CKFt/UlRRImKYakUI44fWw==,type:str]
pgp: [] pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.9.4 version: 3.9.4