Changes
6 changed files (+266/-10)
-
REUSE.toml (new)
-
@@ -0,0 +1,6 @@version = 1 [[annotations]] path = "secrets/**/*.age" SPDX-FileCopyrightText = "Copyright 2025 Shota FUJI <pockawoooh@gmail.com>" SPDX-License-Identifier = "0BSD"
-
-
-
@@ -1,5 +1,53 @@{ "nodes": { "agenix": { "inputs": { "agenix": "agenix_2", "crane": "crane", "flake-utils": "flake-utils", "nixpkgs": [ "nixpkgs" ], "rust-overlay": "rust-overlay" }, "locked": { "lastModified": 1761832913, "narHash": "sha256-VCNVjjuRvrKPiYYwqhE3BAKIaReiKXGpxGp27lZ0MFM=", "owner": "yaxitech", "repo": "ragenix", "rev": "83bccfdea758241999f32869fb6b36f7ac72f1ac", "type": "github" }, "original": { "owner": "yaxitech", "repo": "ragenix", "type": "github" } }, "agenix_2": { "inputs": { "darwin": "darwin", "home-manager": "home-manager", "nixpkgs": [ "agenix", "nixpkgs" ], "systems": "systems" }, "locked": { "lastModified": 1761656077, "narHash": "sha256-lsNWuj4Z+pE7s0bd2OKicOFq9bK86JE0ZGeKJbNqb94=", "owner": "ryantm", "repo": "agenix", "rev": "9ba0d85de3eaa7afeab493fed622008b6e4924f5", "type": "github" }, "original": { "owner": "ryantm", "repo": "agenix", "type": "github" } }, "cl-nix-lite": { "locked": { "lastModified": 1728174978,
-
@@ -15,6 +63,44 @@"type": "github" } }, "crane": { "locked": { "lastModified": 1760924934, "narHash": "sha256-tuuqY5aU7cUkR71sO2TraVKK2boYrdW3gCSXUkF4i44=", "owner": "ipetkov", "repo": "crane", "rev": "c6b4d5308293d0d04fcfeee92705017537cad02f", "type": "github" }, "original": { "owner": "ipetkov", "repo": "crane", "type": "github" } }, "darwin": { "inputs": { "nixpkgs": [ "agenix", "agenix", "nixpkgs" ] }, "locked": { "lastModified": 1744478979, "narHash": "sha256-dyN+teG9G82G+m+PX/aSAagkC+vUv0SgUw3XkPhQodQ=", "owner": "lnl7", "repo": "nix-darwin", "rev": "43975d782b418ebf4969e9ccba82466728c2851b", "type": "github" }, "original": { "owner": "lnl7", "ref": "master", "repo": "nix-darwin", "type": "github" } }, "flake-compat": { "flake": false, "locked": {
-
@@ -33,6 +119,24 @@} }, "flake-utils": { "inputs": { "systems": "systems_2" }, "locked": { "lastModified": 1731533236, "narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=", "owner": "numtide", "repo": "flake-utils", "rev": "11707dc2f618dd54ca8739b309ec4fc024de578b", "type": "github" }, "original": { "owner": "numtide", "repo": "flake-utils", "type": "github" } }, "flake-utils_2": { "inputs": { "systems": [ "mac-app-util",
-
@@ -52,9 +156,9 @@"type": "indirect" } }, "flake-utils_2": { "flake-utils_3": { "inputs": { "systems": "systems_2" "systems": "systems_4" }, "locked": { "lastModified": 1731533236,
-
@@ -71,6 +175,28 @@} }, "home-manager": { "inputs": { "nixpkgs": [ "agenix", "agenix", "nixpkgs" ] }, "locked": { "lastModified": 1745494811, "narHash": "sha256-YZCh2o9Ua1n9uCvrvi5pRxtuVNml8X2a03qIFfRKpFs=", "owner": "nix-community", "repo": "home-manager", "rev": "abfad3d2958c9e6300a883bd443512c55dfeb1be", "type": "github" }, "original": { "owner": "nix-community", "repo": "home-manager", "type": "github" } }, "home-manager_2": { "inputs": { "nixpkgs": [ "nixpkgs"
-
@@ -94,11 +220,11 @@"inputs": { "cl-nix-lite": "cl-nix-lite", "flake-compat": "flake-compat", "flake-utils": "flake-utils", "flake-utils": "flake-utils_2", "nixpkgs": [ "nixpkgs" ], "systems": "systems", "systems": "systems_3", "treefmt-nix": "treefmt-nix" }, "locked": {
-
@@ -132,7 +258,7 @@}, "nixgl": { "inputs": { "flake-utils": "flake-utils_2", "flake-utils": "flake-utils_3", "nixpkgs": [ "nixpkgs" ]
-
@@ -205,7 +331,8 @@}, "root": { "inputs": { "home-manager": "home-manager", "agenix": "agenix", "home-manager": "home-manager_2", "mac-app-util": "mac-app-util", "nix-colorizer": "nix-colorizer", "nixgl": "nixgl",
-
@@ -213,7 +340,58 @@"plac": "plac" } }, "rust-overlay": { "inputs": { "nixpkgs": [ "agenix", "nixpkgs" ] }, "locked": { "lastModified": 1761791894, "narHash": "sha256-myRIDh+PxaREz+z9LzbqBJF+SnTFJwkthKDX9zMyddY=", "owner": "oxalica", "repo": "rust-overlay", "rev": "59c45eb69d9222a4362673141e00ff77842cd219", "type": "github" }, "original": { "owner": "oxalica", "repo": "rust-overlay", "type": "github" } }, "systems": { "locked": { "lastModified": 1681028828, "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=", "owner": "nix-systems", "repo": "default", "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e", "type": "github" }, "original": { "owner": "nix-systems", "repo": "default", "type": "github" } }, "systems_2": { "locked": { "lastModified": 1681028828, "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=", "owner": "nix-systems", "repo": "default", "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e", "type": "github" }, "original": { "owner": "nix-systems", "repo": "default", "type": "github" } }, "systems_3": { "locked": { "lastModified": 1689347925, "narHash": "sha256-ozenz5bFe1UUqOn7f60HRmgc01BgTGIKZ4Xl+HbocGQ=",
-
@@ -228,7 +406,7 @@"type": "github" } }, "systems_2": { "systems_4": { "locked": { "lastModified": 1681028828, "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
-
-
-
@@ -24,6 +24,11 @@inputs.nixpkgs.follows = "nixpkgs"; }; agenix = { url = "github:yaxitech/ragenix"; inputs.nixpkgs.follows = "nixpkgs"; }; mac-app-util = { url = "github:hraban/mac-app-util"; inputs.nixpkgs.follows = "nixpkgs";
-
@@ -47,6 +52,7 @@self, nixpkgs, home-manager, agenix, mac-app-util, nixgl, nix-colorizer,
-
@@ -117,7 +123,14 @@pkgs = import nixpkgs { inherit system overlays; }; modules = [ module ]; specialArgs = { inherit nixpkgs home-manager nix-colorizer; }; specialArgs = { inherit nixpkgs home-manager agenix nix-colorizer ; }; }; in {
-
@@ -183,6 +196,8 @@go dprint nixfmt-rfc-style mkpasswd agenix.packages.${system}.ragenix ]; }; }
-
-
-
@@ -17,13 +17,16 @@# This module is used as Incus system container. { config, pkgs, nixpkgs, home-manager, agenix, ... }: { imports = [ agenix.nixosModules.default ../nixos/state-version.nix ../home-manager ../essentials
-
@@ -43,8 +46,7 @@queenbee = { uid = 1000; isNormalUser = true; # TODO: Change this initialPassword = "test"; hashedPasswordFile = config.age.secrets."queenbee/password".path; extraGroups = [ "wheel" "incus-admin"
-
@@ -52,6 +54,26 @@}; }; services.openssh = { enable = true; settings = { KbdInteractiveAuthentication = false; PermitRootLogin = "no"; PasswordAuthentication = false; }; hostKeys = [ { type = "ed25519"; comment = "agenix"; path = "/etc/ssh/ssh_host_ed25519_key"; } ]; }; home-manager.users.queenbee = ../../hm/profiles/nixos-desktop.nix; age.secrets."queenbee/password".file = ../../../secrets/queenbee/password.age; }; }
-
-
-
@@ -0,0 +1,11 @@-----BEGIN AGE ENCRYPTED FILE----- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IDljNGZ3USA1VGxt dm1EWmpsRERLeUNEUmthcHlWcmcxUDZpY01Hdm5ZYjBFYnFCYjJrCmIveWpUM2Ri TWNxbW8vZmV5M0Q1TVZuTlVrSkJsNzFFa2RvSFVZbHFnOHMKLT4gZD5PaC41aEIt Z3JlYXNlIEtJOyBdTiBTIHZOMWM9aWApCks1d25Lc0N2c09lczdOWjFGMEd1K2hR bzBDRTVabmNXWjZzR3BqL2liaDRxV2NIWDlEYysweG4wL2VRaDZ5YTcKcnlBcEpB Ci0tLSBJSVd2N2k0VEwyM0lGd0FEVEtpTFVzRkNoN1VQUmtiUW1TbmlscnpzUUFr CrvcQD2U7Y5QGmNE9ObYBFuVo/2Vos6Qs7E5ICAhwO9QWIC4/THtuq0TsA7Eh4Ff aS8+TZRfDiN5S+MJO+x/RuzcSop3JUdOXNGT7qZgFAX7C9ikk/KHmWYgA1/cOC0X G4EPww9iWpY6Lrw= -----END AGE ENCRYPTED FILE-----
-
-
secrets/secrets.nix (new)
-
@@ -0,0 +1,24 @@# Copyright 2025 Shota FUJI <pockawoooh@gmail.com> # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted. # # THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH # REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY # AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT, # INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM # LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR # OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR # PERFORMANCE OF THIS SOFTWARE. # # SPDX-License-Identifier: 0BSD let redarch = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMJc5G4k0Nr8UMnP81kpZudVvvuZpu7257nwVmzVS7J4"; in { "queenbee/password.age" = { publicKeys = [ redarch ]; armor = true; }; }
-