nixos

commit acb87186736fdf9d4aee8e1d46ec9b8772a4dd00
parent ab401f30f146e8025d6ca342af7bc5f409a72c11
Author: MTRNord <mtrnord1@gmail.com>
Date:   Wed,  9 Aug 2023 15:51:45 +0200

Let sops create symlinks instead

Diffstat:
M
nixos/worker-1/configuration.nix
 | 
25
++++++++-----------------

1 file changed, 8 insertions(+), 17 deletions(-)
diff --git a/nixos/worker-1/configuration.nix b/nixos/worker-1/configuration.nix
@@ -158,30 +158,21 @@
   sops.age.generateKey = true;
   sops.defaultSopsFile = builtins.path { path = ./secrets/secrets.yaml; name = "worker-1-secrets"; };
   sops.secrets.marcel_initial_password.neededForUsers = true;
-  sops.secrets.ssh_host_ed25519_key.mode = "0600";
-  sops.secrets.ssh_host_ed25519_key_pub.mode = "0644";
-  sops.secrets.ssh_host_rsa_key.mode = "0600";
-  sops.secrets.ssh_host_rsa_key_pub.mode = "0644";
-
-  environment.etc."ssh/ssh_host_ed25519_key" = {
+  sops.secrets.ssh_host_ed25519_key = {
     mode = "0600";
-    source = config.sops.secrets.ssh_host_ed25519_key.path;
+    source = "/etc/ssh/ssh_host_ed25519_key";
   };
-
-  environment.etc."ssh/ssh_host_ed25519_key.pub" = {
+  sops.secrets.ssh_host_ed25519_key_pub = {
     mode = "0644";
-    source = config.sops.secrets.ssh_host_ed25519_key_pub.path;
+    source = "/etc/ssh/ssh_host_ed25519_key.pub";
   };
-
-
-  environment.etc."ssh/ssh_host_rsa_key" = {
+  sops.secrets.ssh_host_rsa_key = {
     mode = "0600";
-    source = config.sops.secrets.ssh_host_rsa_key.path;
+    source = "/etc/ssh/ssh_host_rsa_key";
   };
-
-  environment.etc."ssh/ssh_host_rsa_key.pub" = {
+  sops.secrets.ssh_host_rsa_key_pub = {
     mode = "0644";
-    source = config.sops.secrets.ssh_host_rsa_key_pub.path;
+    source = "/etc/ssh/ssh_host_rsa_key.pub";
   };
 
   # Configure your system-wide user settings (groups, etc), add more users as needed.