polen/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

updated flake/caddy on pi/sops for another day

Browse source
This commit is contained in:
Polen 2024-11-07 22:34:45 -05:00
parent 40bac8356d
commit 6d0754250a
3 changed files with 19 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

22
devices/pi/configuration.nix
View file

@ -21,21 +21,29 @@ in {
}; };
}; };
sops.defaultSopsFile = ../../secrets/secrets.yaml; #sops.defaultSopsFile = ../../secrets/secrets.yaml;
sops.defaultSopsFormat = "yaml"; #sops.defaultSopsFormat = "yaml";
sops.age.keyFile = "/home/polen/.config/sops/age/keys.txt"; #sops.age.keyFile = "/home/polen/.config/sops/age/keys.txt";
#sops.secrets.pi_user_pass.neededForUsers = true;
sops.secrets.pi_user_pass.neededForUsers = true;
networking = { networking = {
networkmanager.enable = true; networkmanager.enable = true;
wireless.enable = false; wireless.enable = false;
hostName = hostname; hostName = hostname;
firewall.allowedTCPPorts = [ 80 443 ];
}; };
nix.settings.trusted-users = [ "polen" ]; services.caddy = {
enable = true;
virtualHosts."mealie.polensky.me".extraConfig = ''
reverse_proxy https://localhost:9925
'';
};
nix.settings.trusted-users = [ user ];
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
htop-vim
neovim neovim
tmux tmux
curl curl
@ -52,7 +60,7 @@ in {
mutableUsers = false; mutableUsers = false;
users."${user}" = { users."${user}" = {
isNormalUser = true; isNormalUser = true;
hashedPasswordFile = config.sops.secrets.pi_user_pass.path; #hashedPasswordFile = config.sops.secrets.pi_user_pass.path;
extraGroups = [ "wheel" "docker" ]; extraGroups = [ "wheel" "docker" ];
}; };
}; };

1
devices/xps13/configuration.nix
View file

@ -23,6 +23,7 @@
# networking.wireless.enable = true; # Enables wireless support via wpa_supplicant. # networking.wireless.enable = true; # Enables wireless support via wpa_supplicant.
nix.settings.experimental-features = [ "nix-command" "flakes" ]; nix.settings.experimental-features = [ "nix-command" "flakes" ];
nix.settings.trusted-users = [ "polen" ];
nix.settings.extra-platforms = config.boot.binfmt.emulatedSystems; nix.settings.extra-platforms = config.boot.binfmt.emulatedSystems;
boot.binfmt.emulatedSystems = ["aarch64-linux"]; boot.binfmt.emulatedSystems = ["aarch64-linux"];

6
flake.lock generated
View file

@ -2,11 +2,11 @@
"nodes": { "nodes": {
"nixpkgs": { "nixpkgs": {
"locked": { "locked": {
"lastModified": 1729880355, "lastModified": 1730785428,
"narHash": "sha256-RP+OQ6koQQLX5nw0NmcDrzvGL8HDLnyXt/jHhL1jwjM=", "narHash": "sha256-Zwl8YgTVJTEum+L+0zVAWvXAGbWAuXHax3KzuejaDyo=",
"owner": "nixos", "owner": "nixos",
"repo": "nixpkgs", "repo": "nixpkgs",
"rev": "18536bf04cd71abd345f9579158841376fdd0c5a", "rev": "4aa36568d413aca0ea84a1684d2d46f55dbabad7",
"type": "github" "type": "github"
}, },
"original": { "original": {