From 0c76b0443dd458c5eec29cb9f4b60779f4d8746d Mon Sep 17 00:00:00 2001 From: DuN0z Date: Sun, 9 Nov 2025 10:48:19 +0100 Subject: [PATCH] Add: passwd with agenix --- hosts/penduick/configuration.nix | 9 +++++---- secrets/dunoz-password-penduick.age | Bin 308 -> 305 bytes secrets/secrets.nix | 3 ++- 3 files changed, 7 insertions(+), 5 deletions(-) diff --git a/hosts/penduick/configuration.nix b/hosts/penduick/configuration.nix index a254499..f5ef4a2 100644 --- a/hosts/penduick/configuration.nix +++ b/hosts/penduick/configuration.nix @@ -29,14 +29,14 @@ in { PasswordAuthentication = true; }; - age.identityPaths = [ "/etc/agenix/penduick.key" ]; - age.secrets."dunoz-password-penduick".file = ../../secrets/dunoz-password-penduick.age; + age.identityPaths = [ "/etc/agenix/penduick.key" "/etc/agenix/dunoz-admin.key" ]; + # age.secrets."dunoz-password-penduick".file = ../../secrets/dunoz-password-penduick.age; users= { - mutableUsers = false ; + # mutableUsers = false ; users.dunoz = { isNormalUser = true; extraGroups = [ "wheel" "networkmanager" ]; - hashedPasswordFile = config.age.secrets."dunoz-password-penduick".path; + # passwordFile = config.age.secrets."dunoz-password-penduick".path; shell = pkgs.zsh; }; }; @@ -50,6 +50,7 @@ in { git htop wget curl neovim age ssh-to-age + weechat ]; diff --git a/secrets/dunoz-password-penduick.age b/secrets/dunoz-password-penduick.age index cf0ffeda54be93ca37818fba39f655c142142ab0..69cddd9f976b01177b76aeb13ca1137a2e1924fe 100644 GIT binary patch delta 282 zcmdnOw2^6oLVby;zDbo^nqR)DN1?uJVzRGyQD$mNRhea0s!>RWQ$eAAxKC<&YD&71 zBUf>uv8iK~v#Y5`SV($dra`iwe{xc|sk5m;u}`YAW4TGNXOLN1l5e_^FPE;JLWGg2 zsiCDprH4m_wwbe=d6;XOv9V!Laz;+Mvt>bkSy*U!RJ~J3p=ENqV_Lp(dSO-|S5RoN zlX;16RFGGsd!?y+dbxH%UZP)sziXyjWVxePo_2a+sdKVlXkK7Gm#(g^LY7xpwqu}W znqP2vWl?x$WtnGKRcT16S7~WVhL3SonUQ6Hr)fcow@Z}?*Ts${dTDEIO$B#&PTKY@ g{M)s!U75m*{q_djlA1p^C%C+P0vF_*5cu0noL zewveMia}CTmT6deSej#+fmf)HYpP3nh_QJ_p--y0MZLL)sYS4bp(ED;zVu_q*6I9s zm($DM@^HyMCh_!}(^7+blo%|FOxNFajB(Gsx##hJVc!*=u!? nu^VKb=iQwr&~#R;dU~QCr+{0$#2uF^qvrWM6CS93_H+dR0b+19 diff --git a/secrets/secrets.nix b/secrets/secrets.nix index 24d20cf..bc436c2 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -2,9 +2,10 @@ let serveur = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPRVxB7usThGHf8cuSPE4sjdqSaPNlwWAZPEo1wUgHz6 root@terre-neuvas"; admin = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAxranFaz3jRfvYE2M6FvRUWjzviIWjWd1mucgKeuSK2 lomig@nixos"; penduick = "age1rnyey8shjxyaq43dzlnhtfkcm3ra4hy3ygh6c46w4xmr7fe9fe3s00nh2r"; + dunoz = "age1ppu60aw0v5wxhrc0gyqmgrukh2a5uaxwqxxmuy0w3fv4tnt02ycqrrgmue"; in { "goaccess-password.age".publicKeys = [ serveur admin ]; - "dunoz-password-penduick.age".publicKeys = [ penduick ]; + "dunoz-password-penduick.age".publicKeys = [ penduick dunoz ]; }