diff options
| author | adikro <adikro@disroot.org> | 2026-03-07 22:27:05 +0100 |
|---|---|---|
| committer | adikro <adikro@disroot.org> | 2026-03-07 22:27:05 +0100 |
| commit | 11d05469368ecfe533c7720e7f5b624f2f8f19fc (patch) | |
| tree | c666f76157b6f9158a2faa723efbf10d1d3dab03 /os/srv/sops.nix | |
| parent | cacaadb79a73fca27bd8bbc0a33a0713d2379655 (diff) | |
...
Diffstat (limited to 'os/srv/sops.nix')
| -rw-r--r-- | os/srv/sops.nix | 15 |
1 files changed, 8 insertions, 7 deletions
diff --git a/os/srv/sops.nix b/os/srv/sops.nix index 40f9c74..fecb9df 100644 --- a/os/srv/sops.nix +++ b/os/srv/sops.nix @@ -23,17 +23,18 @@ in age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ]; secrets = { - "syncthing/gui_password" = { - owner = username; - sopsFile = ../../secrets/oci.yaml; + "syncthing/gui_password".owner = username; + "syncthing/encryption/game-saves".owner = username; + "syncthing/encryption/keepass".owner = username; + "vpn/warp_private_key" = { + owner = "root"; + group = "networkmanager"; + mode = "0400"; + restartUnits = [ "NetworkManager.service" ]; }; "obs/websocket_password".owner = username; root_password.neededForUsers = true; user_password.neededForUsers = true; - oracler_password = { - neededForUsers = true; - sopsFile = ../../secrets/oci.yaml; - }; }; }; |
