forked from KptltD00M/nixy
KptltD00M
5082521524
- Introduced `default-creds` module for managing default credentials with Umami integration. - Added `fail2ban` module for brute-force attack protection with configurable ban times. - Created `firewall` module to enable and configure basic firewall settings. - Implemented `gitea` module for self-hosted Git service with PostgreSQL backend. - Developed `glance` module for a customizable dashboard with various widgets and themes. - Added `iknowyou` module for a self-hosted password manager with production and demo environments. - Introduced `kernel-hardening` module for enhancing kernel security settings. - Created `mazanoke` module for a simple web application with Nginx integration. - Added `mealie` module for a self-hosted meal planning application. - Implemented `stirling-pdf` module for PDF generation service. - Developed `umami` module for self-hosted analytics with secret management. - Added `ssh` module for secure SSH configuration with user restrictions. - Introduced `nixy` theme for a customized aesthetic experience across services.
62 lines
1.5 KiB
Nix
62 lines
1.5 KiB
Nix
# Those are my secrets, encrypted with sops
|
|
# You shouldn't import this file, unless you edit it
|
|
{
|
|
inputs,
|
|
pkgs,
|
|
config,
|
|
...
|
|
}: let
|
|
home = config.home.homeDirectory;
|
|
in {
|
|
imports = [inputs.sops-nix.homeManagerModules.sops];
|
|
|
|
sops = {
|
|
age.keyFile = "${home}/.config/sops/age/keys.txt";
|
|
defaultSopsFile = ./secrets.yaml;
|
|
secrets = {
|
|
ssh-config = {
|
|
path = "${home}/.ssh/config";
|
|
};
|
|
github-key = {
|
|
path = "${home}/.ssh/github";
|
|
};
|
|
jack-key = {
|
|
path = "${home}/.ssh/jack";
|
|
};
|
|
signing-key = {
|
|
path = "${home}/.ssh/key";
|
|
};
|
|
signing-pub-key = {
|
|
path = "${home}/.ssh/key.pub";
|
|
};
|
|
};
|
|
};
|
|
|
|
home.file.".config/nixos/.sops.yaml".text = ''
|
|
keys:
|
|
- &primary age12yvtj49pfh3fqzqflscm0ek4yzrjhr6cqhn7x89gdxnlykq0xudq5c7334
|
|
- &work age1c8pawdsxptfslgrz2c56s39mrtnjzc5mm3hfzgr2wdwu2v6vfsdsupjsq6
|
|
creation_rules:
|
|
- path_regex: hosts/laptop/secrets/secrets.yaml$
|
|
key_groups:
|
|
- age:
|
|
- *primary
|
|
- path_regex: hosts/server/secrets/secrets.yaml$
|
|
key_groups:
|
|
- age:
|
|
- *primary
|
|
- path_regex: hosts/work/secrets/secrets.yaml$
|
|
key_groups:
|
|
- age:
|
|
- *work
|
|
'';
|
|
|
|
systemd.user.services.mbsync.Unit.After = ["sops-nix.service"];
|
|
home.packages = with pkgs; [
|
|
sops
|
|
age
|
|
];
|
|
|
|
wayland.windowManager.hyprland.settings.exec-once = ["systemctl --user start sops-nix"];
|
|
}
|