diff --git a/hosts/common/home.nix b/hosts/common/home.nix index f81353f..042bbb8 100644 --- a/hosts/common/home.nix +++ b/hosts/common/home.nix @@ -14,6 +14,7 @@ # Common Packages home.packages = with pkgs; [ # CLI + sops btop hello fastfetch diff --git a/modules/nixos/secrets.nix b/modules/nixos/secrets.nix new file mode 100644 index 0000000..4a37f7e --- /dev/null +++ b/modules/nixos/secrets.nix @@ -0,0 +1,8 @@ +{ + sops = { + defaultSopsFile = ../../secrets/secrets.yaml; + defaultSopsFormat = "yaml"; + + age.keyFile = "/home/alex/.config/sops/age/keys.txt"; + }; +} diff --git a/modules/nixos/wireless.nix b/modules/nixos/wireless.nix index e8e8219..13414b9 100644 --- a/modules/nixos/wireless.nix +++ b/modules/nixos/wireless.nix @@ -1,7 +1,15 @@ +{ config, ... }: + { + sops.secrets."secrets/freebox-password" = { + owner = "root"; + group = "root"; + mode = "0400"; + }; + networking.wireless.networks = { Freebox-357429 = { - psk = "nv9dmq2sxwqcfhzmqvn4xb"; + pskRaw = "ext:${config.sops.secres."secrets/freebox-password".path}"; }; }; } diff --git a/secrets/secrets.yaml b/secrets/secrets.yaml index 1ba03ee..b86a1e8 100644 --- a/secrets/secrets.yaml +++ b/secrets/secrets.yaml @@ -1,6 +1,8 @@ hello: ENC[AES256_GCM,data:iUTvN5BcSq9z1rm8A9IGi/bC6Y9ktTb0ZJHVnT2FDxX18LBVw9fPJ/u1mzZ4AQ==,iv:RQKjSPXBGmvv2zxtCNWgzwa6M1U6ae8FEVdZ8un4z84=,tag:OgrBQgzjmHELcztURokRAw==,type:str] example-key: ENC[AES256_GCM,data:b2Gx6CGtub7rAnd/kw==,iv:uWJTovo9X/VkXUW7HRfSuQfo2wZ7yjShfUeRghEQcW0=,tag:R0T8tbijxfAUu19wN9iQdw==,type:str] #ENC[AES256_GCM,data:igl42zvcTfvOnZ5eKnWHpw==,iv:ImJmyaweKF5ADkwTarcVGaKb3zb2ycXPzq0KItU64+k=,tag:ydg9C6ZO47QsLoguq60JCg==,type:comment] +wireless: + freebox-password: ENC[AES256_GCM,data:2g9BrZnJska/4FuPdRLJrHMgC7C6lQ==,iv:rSSrGHHy0RhEHFeEPZjTU2+TXWdCgrkMH8Uaamilq1k=,tag:Rm4EOvFPoVOi+dADKg97QA==,type:str] myservice: my_subdir: my_secret: ENC[AES256_GCM,data:LReh8HM87Fbj,iv:HJT6/8NYWePsSo1oBpoB62cnBS68ntkyYX7Pd0Q3DsA=,tag:sKSdst4zkQAHS+7JSDhbIg==,type:str] @@ -15,7 +17,7 @@ sops: TGNWMXd1MmVaMndERGpFc1N0TklFNncKFvO2Y80Z0pLEdoKlmAJ0Me4SM/Y5v9bE qh5J4MvY2MFK9wlgYtql6Xe/OQjzsFLa0sgWE9FBwRwMefWFOgGuRQ== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-12-27T00:54:06Z" - mac: ENC[AES256_GCM,data:1hvMwkfHxmnItx5XdCRx3vACIJ/+Zdf5r+YLnh2n6akn5LtlCtU+btDV3KgmBNg78RFaeqbJxlZfp6GPaaTbBky2IZ8hKFsQbxjdFfH7tgsQRz2VIsUgPSwuSAmWFbpxVMIf932FCqlVyzpiPBV3QzsMo+Iu7ehVHKB3tamoQ+U=,iv:aekLtJU6gShqWKHkLKoj0rxLJ1VhHiIQjzpvGyg5+xw=,tag:JKLwryAEG/suSjrIas7ihQ==,type:str] + lastmodified: "2025-12-27T02:57:35Z" + mac: ENC[AES256_GCM,data:bNJrWLD3uALsCLtC92W/hHxGXbm82OwaoLLJUgzrKzOyDaSOsboi4g8NGsi+xOSqyRYFkfIOSnk5Tw4DxDOtEkJPNPHk/0Wrn2bKHsmWTbLk3r9uoSJp2AwpXByFrbdc7x30uT/rivWJVVLFGoB98p0KrHAEhfJmDZEWCdFif2Q=,iv:1JYXNkD/ks5tKs167h0lbdzG4xUsXGAoZsDVQHwqY14=,tag:wqo3QRiN/L22OBVpL0AQgA==,type:str] unencrypted_suffix: _unencrypted version: 3.11.0