From 9e62e079aec8a039bd1e3cead0149dd0fde8884b Mon Sep 17 00:00:00 2001 From: lucy Date: Sun, 18 Oct 2026 12:15:00 +0200 Subject: [PATCH] add agenix --- flake.nix | 12 ++++++++++++ modules/default.nix | 1 + modules/system/agenix/agenix.nix | 17 +++++++++++++++++ modules/system/agenix/easyroam.age | Bin 0 -> 4536 bytes modules/system/packages.nix | 3 ++- modules/system/user.nix | 3 +-- result | 1 + 7 files changed, 34 insertions(+), 3 deletions(-) create mode 100644 modules/system/agenix/agenix.nix create mode 100644 modules/system/agenix/easyroam.age create mode 120000 result diff --git a/flake.nix b/flake.nix index f3ae302..b9c08ba 100644 --- a/flake.nix +++ b/flake.nix @@ -4,6 +4,18 @@ nixpkgs.url = "github:nixos/nixpkgs/nixos-26.05"; flake-parts.url = "github:hercules-ci/flake-parts"; import-tree.url = "github:vic/import-tree"; + nix-easyroam = { + url = "github:0x5a4/nix-easyroam"; + inputs.nixpkgs.follows = "nixpkgs"; + }; + nixcord = { + url = "github:4evy/nixcord"; + inputs.nixpkgs.follows = "nixpkgs"; + }; + agenix = { + url = "github:ryantm/agenix"; + inputs.nixpkgs.follows = "nixpkgs"; + }; }; outputs = inputs: inputs.flake-parts.lib.mkFlake { inherit inputs; } (inputs.import-tree ./modules); } diff --git a/modules/default.nix b/modules/default.nix index 60f5108..9808457 100644 --- a/modules/default.nix +++ b/modules/default.nix @@ -3,6 +3,7 @@ modules = with self.nixosModules; [ user packages + /etc/nixos/hardware-configuration.nix ]; }; } diff --git a/modules/system/agenix/agenix.nix b/modules/system/agenix/agenix.nix new file mode 100644 index 0000000..562e055 --- /dev/null +++ b/modules/system/agenix/agenix.nix @@ -0,0 +1,17 @@ +{ ... }: { + flake.nixosModules = + { config, ... }: + let + main = "age17hvac3hn79mwttel9snw87a20x4vguh7y7ys43xmvlhrl3mqs3wswuzlt6"; + in + { + "easyroam.age".publicKeys = [ main ]; + age = { + enable = true; + identityPaths = [ "/var/lib/misc/key.age" ]; + secrets = { + easyroam.file = ./easyroam.age; + }; + }; + }; +} diff --git a/modules/system/agenix/easyroam.age b/modules/system/agenix/easyroam.age new file mode 100644 index 0000000000000000000000000000000000000000..e91d8697d0087836f55da55d3737f72fe2ea6f92 GIT binary patch literal 4536 zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR2FFfuhYv{W#6E(tGFfF-}U&2o3hn zEjKDQ$*QUhFU&A^anFkM^Q`m?56IUJ@#QKtsq)J5@Chq6$x1FyH+QtmP0UVnDl+rW zcF77(3J8wM39a-`Hup342<6h%)m8BE%PG(gN%eEFF!N7!EAzv)-8K`q3A$E-Z#Fq_1UZ*iieb@_Gl~I z5;=U~dPJy849k+z*H6Dl9C{sp#K0!>l+h#gTgPJVJ$mtV>AG{4lcrp{yW{lVy_YV% zK9rw0EyMl5qhxaH6B9yQaPWq+S9N{oH9{G^ANx29T{r{g&T#a#8B zm*3^Gh9A7S=&4D+K+l%MiIRP(NzZK-hXXfN8s4u+I`w)YBk!qCOP9y{>5zHvQ)JV5l24UX4FkiyH|O2{mtvE4{3--HJsNmc(*t%blYvc z_sJ(%P8Nw5&K6JC@{-~_-DOcUcR{J$l8P87Bis2u%FHfxE~=-`EmTuU|Ll3bzM;eNhrxqyf0aI6mOSF< z8q_$A?cF4y9c>TJJUgDv9ll)#zqzj!6X{;lYbrnifhoY`P^WPkJgIbt6B zFV5o%6nv*}^iM=-*7F|EPsc*7q6{|*9TpNlBDh^;#Wm~R!w)_EC9j2>&3q|vOQ6Sk zbvXBghw^hG8zwT!yY<)|4}ZRvhfUfGpRqZWD%B@?XngRm1 zEjC(FDo_x(+4k;b)7z1C8F%Fj_~zKXeX!bUzxB@#>jj=Dsxpe7N=fjYYxe(w;@tlE z{64eNWPd%1`a9vq>8nD`CJPVF4EmwftUIx6Y1WqOpJJAa@_%2bZ+-UICCO>6Yp458 z<*V*n$on~T%SFA28*?(Im#j?>PWSSv{r~fL&>WM#wzdP`?SAw$+&r^x5mRifSkURb zX$z;^caE+|tNV99F!_zmxm_=|9ewVj{q5@SLM?rX8{Thb&fhU5y=(D=b=z+&IdtIg z7u5jn$x1#}XQF2G^KDo*+53t?npJ(7Z<=a2B4Du~~>w$|t6zdw83!X3KR7TmqEbjjMraGoE2uQg`7e-qz+EZ5^^ zdf;ZaJ*>X(U)H(Y@M3;5Pd9kE+dTXK$F`Vp*WT=5Y5wqr>E5I+@2%Mj7PcMgE;_yF z+n4?|p+BNC|K1OE6wha4vn}`j`Doc3mb2Su-&N=IlJ#8Nl4mLq_H4iA3#XYH3534uy?8;nx<&{|aYt=5RE7q?H zojPBhvi!xB{o!=L%YggROQ$yK+T2a;?rum|+<*M?bFbMvY8yl4KjfNgck~zB{#T*+ zpr+=kD%ZSx_fI#^FKg&LwM_rH;0Xz}8~?Qy77Fg@ORG70v!%c;jkh#CUS6qq_2icv zuE!quNN+JZ5oG(gHFxralmyq1PBTu~dvb!;DtbhOP6^N+JY2F#$dsEESe%I1&j)%b;>M|dkNfcK0XY84we?UZX zf9c(+EY;dGW-^N&Ib2gp$SYD7oQn*2FSC|x&AJ0<%`P3B@71NXFOpu4%2!xWsmKy z<|zt)9&PT^Yh-VkZj&unqg&cC(@talB?EIWfo1P6a`di`U1-Ou@r)(=@Vj81g=-X6 z9Y68Ca?+y5Hbr)*6 zzo@Fd{lnWS^3#{*`SJxi=S_LF`WpXhdp2k9lpC8Czf|)3uxQJ*qhI0=WzU{|`lz&8 zb6Td0%-8s4%Z8TxXBnTE`_@f76w~}#XT^ls{EwYa-S;Tr3EqGFO4pW_GYfXjkK85p z?U`RfyK!ZO&5VjYmRC-ivLCnm*6ulfdbw1#=C3)c;wqLWDcG`AF!OZHlbT|G`G9ql zUw+23CcYg<5E=o_%o&|<%ZA#_ag%4 zuhu75T7Rs1J8^Yu*UG|$dD5G^wS!wSmL+INRQd+~6`89rcVVi#N6xO|{{9(Gj#K?U zPt{$V24$RS^}k|V{hsec|C|P4_Fp&R+7sV=f5lz&@+W6k(xhddqy%*Sh3zu-_5E%X+qRL5!6CHwSgU2&p2xexR5s^ld@jkq z=J3d0kEx@%SK*$}D&8uIxiTvj_yrp#Pgu?;8J*FV@$k;_r_Q{`v;X{&^8QtQde6R{ zwHa5Z3an$hp)YE3#g|JZdneP8nd_wsyOit}?>KoX zB4X(|%YauAoiZm59L#0+dms|ImCwDj{yS@Ga&dazp8SL9(+G~0`NSKW=-vAg)7?2lyk64^r24{U3nF4_H;+lrIZzv;oufS`A76Yse0ZF4@5 zQljU2aH`w&=Rx&H8^gJs)FwZfaX9e$9pM>g9~^ve_}J4GXO+!e;o?aPPm`?9F>~s+fGjK2L7j(CBb;o{PLzrTo_iy(^3ttoU;}%05PJ=9l80 zeZg;T%3syFre}6YK6AnU@7i`Db9b{BrF}pBVKUF&O`@IW+rKt1RNS0&v+}q`=>H8y z5;=>Hf0>kEqc0@K(zPmB;a$bTzUV{^mX?y#&pQLovuI8iNZw@jK48TwrFX1ixB3?w zubUcj|BqJFg7f=>1oTxO#&Eq}a;KAJcKnv#>s~6)|El`u=iFJ3?%4Y^oi&Pm=oE8u zLze`7`ZdZTo(#uYCO?{Se z^2G|rqtDj}T5o%F6qv)`l**yf((Yy>G(h_gjD8WAAHB z+OlXH%P!s3N1D19EZyLE#-wl2vE0IFg;cxM`~n@dY&)k(<_Ns&brEZ5S5EtIfyd;| zdPNT9tS1#lSFZYb_D^gtWn`T6;o#9Z>wLfUwVhhNe^v43hSXiVzD$1}XAxCb%leUH z<@X1nHm}8WgQqMH@~L_By3prm|6Z?oribqw58T;&XuYJu&ydFAyHhy>_MUq%?ZyGd z&CAdKKbFCp7#_3d_eQ(=pT~G)PF`(_O%=KnTJ`8a)3Rkz#qX?zC%Dc#t0$@VGFhsS zD`)DY+RK-}u6W9?c`Msd#M;s8d*gaX!+pyizCBZ%viEh5RPL4x$&}q6zHv)3>`z$q z=C;(j1IhbdD~4?RnVY!0+HCF5?s;*i&x=Mi9hoVe(qPIlKX$RS=?WFKWp^JvEGb+5 zSh4S#!#azqCufcrySMKzh})gq-qx$UbmBy>RkHlY50}p6UH@?F7bRm0mAmfq&+k%6 zTL0+HzWVOs)mrwKFUUw;N|0=5+~>CE>bKqRg1t9Q-N*hdFrnFxVOGeA?)EnY)1H@_ z&!~KJbKb+HQ=J!lu$NgNk?}yN?d#?v0=PWPPj0`97)H-_ojC zW-A&y?fzb_qrdUdJ=uGc81{R+D{5YKiqBfRA!nNQw+SyNcTfCv>PYvCz1I?3U2Z&F z_2SX(u6>u^D}P>>bZm~+byuOUW!2|6cAf1B>E@~b-oRGqGv^%VPZRs48+sc%YfEmn zn{4=?shb>Im)a@0I65eN#bfI=#^!I_tXPg0oK-vg?qK!JxBG+K9=~ckX7eKUfTH2L zTe_hEE18sjHMD;3+qy@0#nJ2Q6(&{2HJv$M9e!6Wok^edW&4q&@0JtY zaOr^L>5QEx?nSB}NsXWVU2a2C!;CW=A8MLP7UT+tg&R-hxO?}D^=r0{39|K1Rvdix z|4U}SlZ;{bb{>~AvWG<0R!q37?K5vf@-#(`jE3(rubED~%1`k~Q}L1E{<)L?cKXR% zhNUKJjMF#X+PmuZN3Kfd6tKr+wxv)h{=ZDAJb|zms`dOzoCko~f`vxqg{U z<=YB-mKoVzA3U4Y?}a+dn0wiy?4GN$g85WgJ&#xw$JtNyWX(To=`pN}2}u>dbv?{L zy*G!Cr>9%{|AGBBJ6R^MUV3nX;}@&Eq`~TcuOgSJI;Zd~aGDuXKI!B{a)w)m;vsdeL?U6IBM|nHLGg@?VUz+)*9jTop5x2&C$~lk28PT!*spq)+9ZM{1 zOAnYaYV68`mZ B(GUOt literal 0 HcmV?d00001 diff --git a/modules/system/packages.nix b/modules/system/packages.nix index 937dd04..4e2b312 100644 --- a/modules/system/packages.nix +++ b/modules/system/packages.nix @@ -1,5 +1,6 @@ { ... }: { flake.nixosModules.packages = { pkgs, ... }: { + nixpkgs.config.allowUnfree = true; environment.systemPackages = with pkgs; [ stow ufetch @@ -31,7 +32,7 @@ clang gdb gnumake - libreoffice-stable + libreoffice ripgrep jq nmgui diff --git a/modules/system/user.nix b/modules/system/user.nix index 89a1cef..845c136 100644 --- a/modules/system/user.nix +++ b/modules/system/user.nix @@ -1,9 +1,8 @@ { ... }: { - flake.nixosModule.user = { pkgs, ... }: { + flake.nixosModules.user = { pkgs, ... }: { users.users."lucy" = { isNormalUser = true; description = "lucy"; - shell = pkgs.zsh; extraGroups = [ "networkmanager" "wheel" diff --git a/result b/result new file mode 120000 index 0000000..e523bb5 --- /dev/null +++ b/result @@ -0,0 +1 @@ +/nix/store/3lkm1mz19agygph7bmav1qf9k3jx97mx-nixos-vm \ No newline at end of file