nixos

commit 7b3ee30afcb38d9568a967146eaa9abb8fa03b5e
parent 5cc7ccb337c4f79377f8921526ef6a17e5a21382
Author: MTRNord <mtrnord1@gmail.com>
Date:   Wed,  9 Aug 2023 15:20:59 +0200

Correct sops permissions

Diffstat:
M
nixos/worker-1/configuration.nix
 | 
4
++++

1 file changed, 4 insertions(+), 0 deletions(-)
diff --git a/nixos/worker-1/configuration.nix b/nixos/worker-1/configuration.nix
@@ -158,6 +158,10 @@
   sops.age.generateKey = true;
   sops.defaultSopsFile = builtins.path { path = ./secrets/secrets.yaml; name = "worker-1-secrets"; };
   sops.secrets.marcel_initial_password.neededForUsers = true;
+  sops.secrets.ssh_host_ed25519_key.mode = "0600";
+  sops.secrets.ssh_host_ed25519_key_pub.mode = "0644";
+  sops.secrets.ssh_host_rsa_key.mode = "0600";
+  sops.secrets.ssh_host_rsa_key_pub.mode = "0644";
 
   environment.etc."ssh/ssh_host_ed25519_key" = {
     mode = "0600";