summaryrefslogtreecommitdiff
path: root/os/srv
diff options
context:
space:
mode:
Diffstat (limited to 'os/srv')
-rw-r--r--os/srv/gaming.nix4
-rw-r--r--os/srv/sops.nix9
2 files changed, 5 insertions, 8 deletions
diff --git a/os/srv/gaming.nix b/os/srv/gaming.nix
index 3e2eea4..237098c 100644
--- a/os/srv/gaming.nix
+++ b/os/srv/gaming.nix
@@ -70,7 +70,7 @@ in
localNetworkGameTransfers.openFirewall = true;
dedicatedServer.openFirewall = true;
remotePlay.openFirewall = false;
- extest.enable = true;
+ # extest.enable = true;
protontricks.enable = true;
extraCompatPackages = with pkgs; [
@@ -86,6 +86,8 @@ in
enable = true;
openFirewall = true;
};
+ environment.systemPackages = [ pkgs.android-tools ];
+ users.users.${username}.extraGroups = [ "adbusers" ];
})
];
}
diff --git a/os/srv/sops.nix b/os/srv/sops.nix
index fecb9df..36ab9ef 100644
--- a/os/srv/sops.nix
+++ b/os/srv/sops.nix
@@ -18,7 +18,7 @@ in
};
config = lib.mkIf cfg.enable {
sops = {
- defaultSopsFile = ../../secrets/common.yaml;
+ defaultSopsFile = ../../secrets.yaml;
defaultSopsFormat = "yaml";
age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
@@ -26,12 +26,7 @@ in
"syncthing/gui_password".owner = username;
"syncthing/encryption/game-saves".owner = username;
"syncthing/encryption/keepass".owner = username;
- "vpn/warp_private_key" = {
- owner = "root";
- group = "networkmanager";
- mode = "0400";
- restartUnits = [ "NetworkManager.service" ];
- };
+ "vpn/warp_private_key".owner = "root";
"obs/websocket_password".owner = username;
root_password.neededForUsers = true;
user_password.neededForUsers = true;