DuN0z/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add: passwd with agenix

Browse source
This commit is contained in:
DuN0z 2025-11-09 10:48:19 +01:00
parent a42007c7c5
commit 0c76b0443d
3 changed files with 7 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

9
hosts/penduick/configuration.nix
View file

@ -29,14 +29,14 @@ in {
PasswordAuthentication = true; PasswordAuthentication = true;
}; };
age.identityPaths = [ "/etc/agenix/penduick.key" ]; age.identityPaths = [ "/etc/agenix/penduick.key" "/etc/agenix/dunoz-admin.key" ];
age.secrets."dunoz-password-penduick".file = ../../secrets/dunoz-password-penduick.age; # age.secrets."dunoz-password-penduick".file = ../../secrets/dunoz-password-penduick.age;
users= { users= {
mutableUsers = false ; # mutableUsers = false ;
users.dunoz = { users.dunoz = {
isNormalUser = true; isNormalUser = true;
extraGroups = [ "wheel" "networkmanager" ]; extraGroups = [ "wheel" "networkmanager" ];
hashedPasswordFile = config.age.secrets."dunoz-password-penduick".path; # passwordFile = config.age.secrets."dunoz-password-penduick".path;
shell = pkgs.zsh; shell = pkgs.zsh;
}; };
}; };
@ -50,6 +50,7 @@ in {
git htop wget curl git htop wget curl
neovim neovim
age ssh-to-age age ssh-to-age
weechat
]; ];

BIN
secrets/dunoz-password-penduick.age
View file

Binary file not shown.

3
secrets/secrets.nix
View file

@ -2,9 +2,10 @@ let
serveur = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPRVxB7usThGHf8cuSPE4sjdqSaPNlwWAZPEo1wUgHz6 root@terre-neuvas"; serveur = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPRVxB7usThGHf8cuSPE4sjdqSaPNlwWAZPEo1wUgHz6 root@terre-neuvas";
admin = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAxranFaz3jRfvYE2M6FvRUWjzviIWjWd1mucgKeuSK2 lomig@nixos"; admin = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAxranFaz3jRfvYE2M6FvRUWjzviIWjWd1mucgKeuSK2 lomig@nixos";
penduick = "age1rnyey8shjxyaq43dzlnhtfkcm3ra4hy3ygh6c46w4xmr7fe9fe3s00nh2r"; penduick = "age1rnyey8shjxyaq43dzlnhtfkcm3ra4hy3ygh6c46w4xmr7fe9fe3s00nh2r";
dunoz = "age1ppu60aw0v5wxhrc0gyqmgrukh2a5uaxwqxxmuy0w3fv4tnt02ycqrrgmue";
in in
{ {
"goaccess-password.age".publicKeys = [ serveur admin ]; "goaccess-password.age".publicKeys = [ serveur admin ];
"dunoz-password-penduick.age".publicKeys = [ penduick ]; "dunoz-password-penduick.age".publicKeys = [ penduick dunoz ];
} }