feat: add webis module
parent
420b5d5d10
commit
57f2094c44
|
@ -15,6 +15,7 @@
|
|||
profiles = {
|
||||
desktop.enable = true;
|
||||
personal.enable = true;
|
||||
webis.enable = true;
|
||||
};
|
||||
};
|
||||
|
||||
|
|
|
@ -18,7 +18,7 @@ in
|
|||
synology-drive.enable = true;
|
||||
};
|
||||
programs = {
|
||||
ssh.includeSecrets = mkDefault [ ../../secrets/ssh-home.age ];
|
||||
ssh.includeSecrets = [ ../../secrets/ssh-home.age ];
|
||||
git.signing = mkDefault true;
|
||||
hub.enable = mkDefault true;
|
||||
firefox.arkenfox = {
|
||||
|
|
|
@ -0,0 +1,28 @@
|
|||
{ lib
|
||||
, config
|
||||
, ...
|
||||
}:
|
||||
|
||||
with lib;
|
||||
let
|
||||
cfg = config.my.profiles.webis;
|
||||
in
|
||||
|
||||
{
|
||||
options.my.profiles.webis.enable = mkEnableOption "webis profile";
|
||||
|
||||
config = mkIf cfg.enable {
|
||||
my.programs.ssh.includeSecrets = [ ../../secrets/webis-ssh.age ];
|
||||
age.secrets.webis = {
|
||||
file = ../../secrets/webis.age;
|
||||
name = "webis.ovpn";
|
||||
};
|
||||
services.openvpn.servers = {
|
||||
webis = {
|
||||
config = "config /run/agenix/webis.ovpn";
|
||||
autoStart = false;
|
||||
updateResolvConf = true;
|
||||
};
|
||||
};
|
||||
};
|
||||
}
|
|
@ -6,7 +6,8 @@ let
|
|||
nixos-laptop = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDhtwHDGAZshiQWKkCcPWV9tC83b+bKBgjDcjP/N2CKO";
|
||||
nixos-desktop = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKl8gMhwSf1NsP5gp14xbbyjqQLZzcHLb/XKRMoHdXgI";
|
||||
nixos-work = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGQdruRBgcS3JbX+8DP4GE+28M/ZnxqxhoaMM5EVUkrD";
|
||||
hosts = [ nixos-laptop nixos-desktop nixos-work ];
|
||||
hosts-personal = [ nixos-laptop nixos-desktop ];
|
||||
hosts = hosts-personal ++ [ nixos-work ];
|
||||
|
||||
all = users ++ hosts;
|
||||
in
|
||||
|
@ -18,4 +19,6 @@ in
|
|||
"uni-vpn.age".publicKeys = all;
|
||||
"wireguard-preshared-key.age".publicKeys = all;
|
||||
"wireguard-private-key.age".publicKeys = all;
|
||||
"webis.age".publicKeys = hosts-personal ++ [ moritz ];
|
||||
"webis-ssh.age".publicKeys = hosts-personal ++ [ moritz ];
|
||||
}
|
||||
|
|
Binary file not shown.
Binary file not shown.
Loading…
Reference in New Issue