VSinerva/nixos-conf
1
0
Fork 0
Code Activity Actions

Move helium to sops-nix

Browse source
This commit is contained in:
Vili Sinervä 2025-06-21 14:03:46 +03:00
parent 924f738618
commit ec685a2e86
Signed by: Vili Sinervä
SSH key fingerprint: SHA256:FladqYjaE4scJY3Hi+gnShZ6ygnTJgixy0I6BAoHyos
8 changed files with 161 additions and 41 deletions
Download patch file Download diff file Expand all files Collapse all files

11
hosts/helium/configuration.nix
View file

@ -1,15 +1,22 @@
{ pkgs, lib, ... }:
{
config,
pkgs,
lib,
...
}:
{
custom.home_wg_suffix = "2";
system.autoUpgrade.allowReboot = lib.mkForce false;
sops.secrets.priv-netflix-wg.sopsFile = ../../secrets/helium/netflix-wg.yaml;
networking = {
wg-quick.interfaces = {
wg1 = {
autostart = false;
address = [ "10.100.0.7/24" ];
dns = [ "1.1.1.1" ];
privateKeyFile = "/persist/secrets/wireguard/priv-netflix";
privateKeyFile = config.sops.secrets.priv-netflix-wg.path;
listenPort = 51820;
peers = [