root/the_prg_server_configuration_old
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Oeh, will this work...?

Browse source
This commit is contained in:
Root User 2026-02-07 18:16:35 +01:00
parent a110fa37bc
commit fc1ab7ce9c
Signed by: root
GPG key ID: 087F0A95E5766D72
3 changed files with 20 additions and 18 deletions
Download patch file Download diff file Expand all files Collapse all files

1
nix-system-configs/modules/scripts/compose_two_nix.zsh
View file

@ -1,2 +1,3 @@
## Todo, make a proper script for this
EDITOR=micro nix-shell -p sops --run "SOPS_AGE_KEY_FILE=$HOME/.config/sops/age/keys.txt sops nix-system-configs/secrets/songsheet/secrets.yaml"
compose2nix --inputs nix-system-configs/modules/songsheet/wavelog/docker-compose.yml --sops_file nix-system-configs/secrets/songsheet/secrets.yaml --project=wavelog --output nix-system-configs/modules/songsheet/wavelog/docker-compose.nix --root_path nix-system-configs/modules/songsheet/wavelog

28
nix-system-configs/modules/secrets-config/sops-nix.nix
View file

@ -15,18 +15,16 @@
}}/modules/sops"
];
# This will add secrets.yml to the nix store
# You can avoid this by adding a string to the full path instead, i.e.
# sops.defaultSopsFile = "/root/.sops/secrets/example.yaml";
sops.defaultSopsFile = ../../secrets/songsheet/secrets.yaml;
# This will automatically import SSH keys as age keys
sops.age.sshKeyPaths = [ "/home/songsheetprg/.ssh/id_ed25519.pub" ];
# This is using an age key that is expected to already be in the filesystem
sops.age.keyFile = "/var/lib/sops-nix/key.txt";
# This will generate a new key if the key specified above does not exist
sops.age.generateKey = true;
# Use the flat key name with quotes
sops.secrets."songsheet/database" = {
key = "songsheet/database";
};
}
# This will add secrets.yml to the nix store
# You can avoid this by adding a string to the full path instead, i.e.
# sops.defaultSopsFile = "/root/.sops/secrets/example.yaml";
sops.defaultSopsFile = ../../secrets/songsheet/secrets.yaml;
# This will automatically import SSH keys as age keys
sops.age.sshKeyPaths = ["/home/songsheetprg/.ssh/id_ed25519.pub"];
# This is using an age key that is expected to already be in the filesystem
sops.age.keyFile = "/var/lib/sops-nix/key.txt";
# This will generate a new key if the key specified above does not exist
sops.age.generateKey = true;
# Use the flat key name with quotes
sops.secrets."songsheet/database" = {};
}