-
First, thanks for `sops.templates`. It is the one final thing i was missing for sops. But:
`sops.templates` is insecure: it does not use tmpfs. Templates should be symlinked to secrets.d just as ot…
-
- [x] enable passwords with sops-nix
- [x] git config
- [x] add new ssh keys
- [x] github
- [x] servers
- [ ] add new wireguard keys
- [x] add 1password
- [ ] enable 1password ssh-agent
…
-
I'm trying to provision a VM with `nixos-everywhere`.
The root password is set with `sops-nix`:
```nix
sops.secrets.password-root.neededForUsers = true;
users.users.root = {
p…
-
with nix starting to warn about passwordFile being deprecated and the migration to hashedPasswordFile
i'd still like to use plain passwords in my sops files (in order to avoid the need for secondar…
-
If I configure different `services.openssh.hostKeys` the default for `sshKeyPaths` still stays at the default `services.openssh.hostKeys` (i.e. "/etc/ssh/ssh_host_ed25519_key" and "/etc/ssh/ssh_host_r…
-
Subscribe to this issue and stay notified about new [daily trending repos in Nix](https://github.com/trending/nix?since=daily).
-
### Are you following the right branch?
- [X] My Nixpkgs and Home Manager versions are in sync
### Is there an existing issue for this?
- [X] I have searched the existing issues
### Issue descript…
drzln updated
4 weeks ago
-
I just tried to use nixos-anywhere for a new server and noticed it now unmounts and exports the ZFS pool.
I need these to stay mounted though so that I can copy over the SSH keys for SOPS.
An option t…
-
I am just starting to use sops-nix (awesome project btw!), this might be my fault:
The symlink functionality does not seem to work for me:
The following snippet contains my config for Syncthing…
-
What am I doing wrong?
```nix
{ config, pkgs, ... }:
{
age.secrets."attic.env".file = ./attic.env.age;
environment.systemPackages = with pkgs; [
attic
];
services.atticd = {
…