gensokyo-zone/infrastructure
1
0
Fork 0
mirror of https://github.com/gensokyo-zone/infrastructure.git synced 2026-02-09 12:29:19 -08:00
Code Issues Projects Releases Packages Wiki Activity Actions

secrets module overhaul, moving back to bitwarden, removed glauca dyndns

Browse source
This commit is contained in:
kat witch 2021-09-01 05:44:04 +01:00
parent 1391eabee4
commit 57b35ead89
No known key found for this signature in database
GPG key ID: 1B477797DCA5EC72
26 changed files with 190 additions and 192 deletions
Download patch file Download diff file Expand all files Collapse all files

9
config/users/kat/media/syncplay.nix
View file

@ -3,9 +3,12 @@
with lib;
{
kw.secrets = [
"syncplay-pass"
];
kw.secrets.variables = {
syncplay-pass = {
path = "services/media/syncplay";
field = "password";
};
};
programs.syncplay = {
enable = true;

2
config/users/kat/personal/bitw.nix
View file

@ -1,7 +1,7 @@
{ config, pkgs, lib, ... }: with lib; {
programs.rbw = {
enable = true;
package = mkIf config.deploy.profile.trusted (pkgs.writeShellScriptBin "bitw" ''${pkgs.rbw-bitw}/bin/bitw -p gpg://${config.kw.repoSecrets.bitw.source} "$@"'');
package = mkIf config.deploy.profile.trusted (pkgs.writeShellScriptBin "bitw" ''${pkgs.rbw-bitw}/bin/bitw -p gpg://${config.kw.secrets.repo.bitw.source} "$@"'');
settings = {
email = "kat@kittywit.ch";
base_url = "https://vault.kittywit.ch";

12
config/users/kat/personal/taskwarrior.nix
View file

@ -1,7 +1,15 @@
{ config, pkgs, tf, lib, ... }:
with lib;
{
kw.secrets = [ "taskwarrior-key" "taskwarrior-creds" ];
kw.secrets.variables = let
fieldAdapt = field: if field == "key" then "notes" else field;
in mapListToAttrs (field:
nameValuePair "taskwarrior-${field}" {
path = "services/taskwarrior";
field = fieldAdapt field;
}) ["key" "credentials"];
secrets.files = {
taskw_key = {
@ -11,7 +19,7 @@
};
taskw_config = {
text = ''
taskd.credentials=${tf.variables.taskwarrior-creds.ref}
taskd.credentials=${tf.variables.taskwarrior-credentials.ref}
'';
owner = "kat";
group = "users";

2
config/users/kat/personal/weechat.nix
View file

@ -3,7 +3,7 @@
{
home.file = lib.mkIf config.deploy.profile.trusted (
let
bitw = pkgs.writeShellScriptBin "bitw" ''${pkgs.rbw-bitw}/bin/bitw -p gpg://${config.kw.repoSecrets.bitw.source} "$@"'';
bitw = pkgs.writeShellScriptBin "bitw" ''${pkgs.rbw-bitw}/bin/bitw -p gpg://${config.kw.secrets.repo.bitw.source} "$@"'';
in
{
".local/share/weechat/sec.conf".text = ''

14
config/users/kat/services/weechat/default.nix
View file

@ -1,10 +1,16 @@
{ config, lib, nixos, pkgs, tf, ... }:
{
kw.secrets = [
"matrix-pass"
"znc-pass"
];
kw.secrets.variables = {
matrix-pass = {
path = "social/matrix";
field = "password";
};
znc-pass = {
path = "social/irc/znc";
field = "password";
};
};
secrets.files.weechat-sec = {
text = ''