Changed Security Details

This commit is contained in:
DerGrumpf
2026-04-04 16:18:02 +02:00
parent 62d3c12930
commit 6b665c5763
16 changed files with 9 additions and 18 deletions

View File

@@ -93,7 +93,7 @@
home = "/home/${primaryUser}";
shell = pkgs.fish;
isNormalUser = true;
openssh.authorizedKeys.keyFiles = [ ./ssh-key ];
openssh.authorizedKeys.keyFiles = [ ../secrets/ssh-key ];
extraGroups = [ "wheel" "video" "audio" "libvirtd" ];
};
}

View File

@@ -1,18 +1,7 @@
{ primaryUser, ... }:
{
{ primaryUser, ... }: {
sops = {
defaultSopsFile = ../secrets/secrets.yaml;
defaultSopsFormat = "yaml";
age.keyFile = "/home/phil/.config/sops/age/keys.txt";
secrets = {
GROQ_API_KEY = { };
OPENWEATHER_API_KEY = { };
ssh_private_key = {
path = "/home/${primaryUser}/.ssh/ssh";
owner = primaryUser;
mode = "0600";
};
};
age.keyFile = "/home/${primaryUser}/.config/nix/secrets/keys.txt";
};
}

View File

@@ -1 +0,0 @@
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEuYuGhqRC/QLoRBH91c3DG5JHlAdRLQsvde18k5ipY2 phil@cyperpunk.de

View File

@@ -1,5 +1,6 @@
{ pkgs, ... }:
{
{ pkgs, ... }: {
# TODO: This need to be tested against the cam and kernel rules need to be refined
services.udev.extraRules = ''
ACTION=="add", \
SUBSYSTEM=="usb", \