Skip to content
This repository was archived by the owner on Jun 7, 2025. It is now read-only.

Commit ac68ecc

Browse files
DefeloDefelo
committed
Use sops-nix for nm connections
1 parent 30a7ea3 commit ac68ecc

File tree

18 files changed

+337
-17
lines changed

18 files changed

+337
-17
lines changed

‎.sops.yaml

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
keys:
2+
- &defelo 61303BBAD7D1BF74EFA44E3BE7FE2087E4380E64
3+
- &nitrogen age1v9szwgk0xp383z9fu657kzp60mpxlsg4lm0c73xest7xdrcf4qnqfwlnrd
4+
creation_rules:
5+
- path_regex: secrets/.+$
6+
key_groups:
7+
- pgp: [ *defelo ]
8+
age: [ *nitrogen ]

‎flake.lock

Lines changed: 53 additions & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎flake.nix

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,7 @@
88
url = "github:nix-community/home-manager";
99
inputs.nixpkgs.follows = "nixpkgs";
1010
};
11+
sops-nix.url = "github:Mic92/sops-nix";
1112
flake-utils.url = "github:numtide/flake-utils";
1213
nix-index-database = {
1314
url = "github:Mic92/nix-index-database";

‎home/packages.nix

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -60,6 +60,9 @@
6060
xclip
6161
ripgrep
6262
xdotool
63+
age
64+
sops
65+
renameutils
6366

6467
obsidian
6568
vlc

‎home/picom.nix

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -22,8 +22,8 @@
2222
};
2323
in
2424
pkgs.lib.attrsets.mapAttrsToList (key: value: "${toString value}:class_g = '${key}'") rules;
25-
settings = {
26-
corner-radius = 4;
27-
};
25+
# settings = {
26+
# corner-radius = 4;
27+
# };
2828
};
2929
}

‎home/zsh.nix

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -171,6 +171,7 @@
171171
lsblk = "lsblk -M";
172172
type = "which";
173173
j = "just";
174+
qmv = "qmv -f destination-only";
174175
mnt = "source ${../scripts/mount.sh}";
175176
tt = "${../scripts/timetracker.sh}";
176177
beamer = "${../scripts/beamer.sh}";

‎secrets.nix

-3.7 KB
Binary file not shown.

‎secrets/default.yml

Lines changed: 32 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,32 @@
1+
foo: ENC[AES256_GCM,data:O+cs,iv:wFzfuXAXmUXe+B6gDrO5xrlOsDCjFSmu3yrrPZJIvVs=,tag:0IFANXzphoNQUeyZS1VqbQ==,type:str]
2+
sops:
3+
kms: []
4+
gcp_kms: []
5+
azure_kv: []
6+
hc_vault: []
7+
age:
8+
- recipient: age1v9szwgk0xp383z9fu657kzp60mpxlsg4lm0c73xest7xdrcf4qnqfwlnrd
9+
enc: |
10+
-----BEGIN AGE ENCRYPTED FILE-----
11+
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwSkVHYjg2Mm5PejRmVFhw
12+
V2xDWWhWQVFzOGhKSWFubU9nMFE5eXQrTUVRClhCSXgvaVpPT0lEUmVWY3d0K0g5
13+
WW1lV25kNXZ0YlV0Q0E5QWcwMUwrdjQKLS0tIHdjdlkzM2owSWt0VGNtS2FMZ1NO
14+
MnFDZUt3RFphMHZXTjNlOTlJbFQrVG8K4mo3svY8kQ1Znt0at84aA7vkUi4HAzMY
15+
h+70UQpjcqMAj7rvnIucnbJJrGJBbK+ylvpPDUT5Vm6kQ8kMS9NtUg==
16+
-----END AGE ENCRYPTED FILE-----
17+
lastmodified: "2023-04-24T08:41:48Z"
18+
mac: ENC[AES256_GCM,data:2rqanjJb5FSFWhv/jbmMOt0zTO3gkKnY2TEB4Sq6WGghAF3HyRMFKgtdVu5IiKC3QwGyXQyywWl+fYKU6Yi0pj6EnPh8+qbqTX3TOJXl2ipMbaSFG1Xut28BtbZiMuTRFN8KIZhP0ZSFhRutdHHETLQYwy6ugCyzc7p/LN3M3EY=,iv:l0aWDvVKUaIoijMNsEOYxLcA+MbChpVrXOomBP8MDec=,tag:46HvVLaPiWBNNh1wIsS+9A==,type:str]
19+
pgp:
20+
- created_at: "2023-04-24T08:41:43Z"
21+
enc: |-
22+
-----BEGIN PGP MESSAGE-----
23+
24+
wV4D8w/Zb+cfdxsSAQdAdUuG3frrHoARJ6Tf7LfvtdFxo4ad5rZLMAkAnKw+uAEw
25+
M7eIhXXBJ7nOSdPcEnqcBY2siNg0FsKuM3D+hFhEHop5b03huIuxaPH4xjJyJpMw
26+
0lEBBj0I/5ZDGP4w7MC1BfjOg3wxBuxzA1Nf9kfdXoUbbtPtNzIfknL9VhVTl+CZ
27+
U72cVb2qijXz++aM36AON/S1FaqthFAQ71J89LpVLvMrs6s=
28+
=zgHP
29+
-----END PGP MESSAGE-----
30+
fp: 61303BBAD7D1BF74EFA44E3BE7FE2087E4380E64
31+
unencrypted_suffix: _unencrypted
32+
version: 3.7.3

‎secrets/networking.yml

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
vpn:
2+
default: ENC[AES256_GCM,data:1oG0/trjna674kjYt+XmMmSvhmuLuLReWVPAmCr5agvsziRz,iv:jtYzpk49d/uoOsDlydjJQJ5G3E2Uoe8A3MblULVd7V4=,tag:nqYeWm/WN4HU9UmAJowJGQ==,type:str]
3+
full: ENC[AES256_GCM,data:FTxg3osx9CzndWceo/jVJeg+G1JmCexLyZqSbwAvGv1dPMl1,iv:r9BhQq9HD/or7VwBlwE5dvplyufyECCvM0/E0jWJ9XU=,tag:xOefpFH3WNQQvctvXoyHkQ==,type:str]
4+
wifi:
5+
trusted: ENC[AES256_GCM,data:8N4YAXVqJg8Wz0m6U/+dc0XcamvsamHnPHELasmhU9YwmYdDJA==,iv:CIzUv+QtRwlxD6+SDVnSVlukONsjauQ9d1SFFuapRNo=,tag:9AGaSQxJAe4PZzS3FsRl9w==,type:str]
6+
sops:
7+
kms: []
8+
gcp_kms: []
9+
azure_kv: []
10+
hc_vault: []
11+
age:
12+
- recipient: age1v9szwgk0xp383z9fu657kzp60mpxlsg4lm0c73xest7xdrcf4qnqfwlnrd
13+
enc: |
14+
-----BEGIN AGE ENCRYPTED FILE-----
15+
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZOGlBeUYvaWZkdHdsc3BH
16+
K2cxSVFWd3hwTHVyUCtRRXZZeEFYTmJiWmtrCjVMSXh5MG81enkyRS90dnJjUWF0
17+
dnNFZ2FCeGM5QUZQRE8vcTJFZEpSVEkKLS0tIHZZK1E0eGN5K1REQnRwd2RPTG11
18+
UzBsZjdFcHJqaTBLRDhCQlRTVDNiV1kKkWxgBXcyiY8j0r7cbi2YpCFW8Q2NhqFt
19+
KiROlJCzHWPoVQ7SfiGid/A2njYZodIPrZK4Ubw28TC1T35+sNpH6Q==
20+
-----END AGE ENCRYPTED FILE-----
21+
lastmodified: "2023-04-24T12:42:43Z"
22+
mac: ENC[AES256_GCM,data:A+u/ycJjNqAkD1fKZv217YOMysuENXLVE3TC7UyCO0TynRM47v+UJ3kqqoFbzCPOB97YQ6+GPcXoLJ/QMErRVARd2UE5zB9GLGHACXj/F5QCxhdlmGBm/q1xa1MJrFpUmFngvlXPjaEDCuQiW7q2IYuA9KK7k+BYgo/H9o2DOxk=,iv:1eDnRSUsz+Rn1d2alMBNBTPsZw2ZvbZg1/r2JZt4KpQ=,tag:06P3YosqyJY+4vTc6bUZbQ==,type:str]
23+
pgp:
24+
- created_at: "2023-04-24T12:15:32Z"
25+
enc: |-
26+
-----BEGIN PGP MESSAGE-----
27+
28+
wV4D8w/Zb+cfdxsSAQdA2ROubZ5MC35ASUImYC7llTDyuwB8uqkhvdP+suQ690Yw
29+
/aR5g0OeKc0KINsy0L4rb1vbWx3gHbBlzTdfuC+yY+kni0W7cSIb8SLcDEj1gxI1
30+
0lEBqiu8fD6in9yarK3YTHc+Vgjx7E9bPdioWzhuk87YHS7kONvw4yN4h9GxRNCk
31+
AaXYQ7XzX/g8ENikcVZevO3+gGQyJ8VfCK5x/Cp0qm+qCAU=
32+
=XedR
33+
-----END PGP MESSAGE-----
34+
fp: 61303BBAD7D1BF74EFA44E3BE7FE2087E4380E64
35+
unencrypted_suffix: _unencrypted
36+
version: 3.7.3

‎secrets/nm-connections/home-wifi

Lines changed: 26 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,26 @@
1+
{
2+
"data": "ENC[AES256_GCM,data:CbJX5CEzVYl5A/nHx4ueF8w/pgJjsCrFY3JK20gestD1J5FNVFKU+G6cFJ9lsbMkUFuEK4aIGisTarvD2FhOdhfHxwQd2Ikbch725KKPDGd80g/zaGgCCGQR1/wzE7ETb/Y9VZfPHXyh2Xirrf5tX9IUc+e5a/cQmwWGvq6O1a0R6x8EZa1/X7HYUuN6h0DKV8GG2l1iFNN3VRtYSuGO5zySlyiKuyipTRq/V5h2itLmbsweA/ORcZzwUDK+YZjxyy5wuuc4xaDF17YpmyLJjJ7rhSQv17w+jRt4HyLSWNvPEAsZSz91UQHXr4NKJtiSJhHDjfsHb4UaUYqXQ4pYJY4nYDkpBweyayee1RGwT/lyK7Efbu4iNVEB6fj+pgppTbgN+uTKhmyf9q9CY8J4bP9FjB6xiMVJ2I1Qc0k/RcydhdemVfk0sgNv38TP8eMiCZe8caJKPW++7qcNwPAZ7cIYkec/BDMuSlzUN3HFSPlj53T1bJM=,iv:ownm79zIfO3aeNeY6OPJWBZJYWVNQGP/yIHV5J+7v9M=,tag:Cqhk1IC68y2ANtg0srbm1Q==,type:str]",
3+
"sops": {
4+
"kms": null,
5+
"gcp_kms": null,
6+
"azure_kv": null,
7+
"hc_vault": null,
8+
"age": [
9+
{
10+
"recipient": "age1v9szwgk0xp383z9fu657kzp60mpxlsg4lm0c73xest7xdrcf4qnqfwlnrd",
11+
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4eU5HUmoxQXdmRXpPTStx\nOXlyN1dmZVllZmw2c0loeHFGUXdRd1krVFgwCm5IdnQxcVRHMytLL2I0b0sycGpM\naVU2Z1FjbHFva216Z0ZYS2F3MWpGQkkKLS0tIGc1SWQ4b1BrU29teDkzeEJDeDZP\naEx2Q1dPRGVaWTY4c2g5UUNOQXo5VEEKLT/CesvVnX00rCvZii08SjczoICy1RQn\ndTZZrzb8RX4AZ2FiPDjQGnJ2fXkm1ZRPnLL+Z12BW6TcJ8xpLlrsyg==\n-----END AGE ENCRYPTED FILE-----\n"
12+
}
13+
],
14+
"lastmodified": "2023-04-24T08:58:48Z",
15+
"mac": "ENC[AES256_GCM,data:QYEzmKl0YUWpU51nHc3MgHlaUkgXnhCFwpV9CJ0qudLPPvO5XuG7848nwGXQCNL8HRly3neFCy0GKrn1uuUo9WVJChIq5Q3XycF8iIyfFluB0PWiEbEcCrUAWGF82Zth2fgIRGXwEvXpWCH8dq0rhLJeoR4Ou25yfjXj3fzPzOg=,iv:paRj8Y/U/70Dx9gV8adGqfhMrqZ/Kuj3TYu0YB6FJIM=,tag:GBTDQQ4x/1MyLPzjIoDW3A==,type:str]",
16+
"pgp": [
17+
{
18+
"created_at": "2023-04-24T08:58:48Z",
19+
"enc": "-----BEGIN PGP MESSAGE-----\n\nwV4D8w/Zb+cfdxsSAQdAG8ep2gOLNf7ACP7m/kyVo3xd2v59l9JlSwecyRxap24w\ntAznNuB7JGfmOE1Ncmc6WtqzN0wKICuRDTGou456zFu3E1W7AK3Sc2iCe0vPI9U4\n0lEBKC/qczTmpVoUcYlx3QMAm4RGyP30eW5a69RX3MLu2oVPCpqQtw7nfnqqinI4\n8l0gjLu8tKKPovQQs/DgzW4sTtAV/wJ0XGvxoN0zEYUVS8k=\n=rkdM\n-----END PGP MESSAGE-----",
20+
"fp": "61303BBAD7D1BF74EFA44E3BE7FE2087E4380E64"
21+
}
22+
],
23+
"unencrypted_suffix": "_unencrypted",
24+
"version": "3.7.3"
25+
}
26+
}

0 commit comments

Comments
 (0)