Flake for my desktop, laptop, and my homelab.
switch back to normal age keyt
+29
-37
+1
-1
.sops.yaml
+1
-1
.sops.yaml
···
8
8
- &vm age18xgnqqn70msl9wzqpnlwjpupwtkzzyxq65tvpsr7zzpkq7av6fjs2hz79d
9
9
# keep-sorted end
10
10
# keep-sorted start
11
-
- &euclid age1f2pmdmv29e98phn5r9sj9m85ysu3t03wpsf98xgex6fzqkyv8g5shs2sr8
11
+
- &euclid age1yl52c6aemw9anmfuqayamvsnkvlu6fmy0kk3gzvrraexxd9pr90qvs8pe5
12
12
# keep-sorted end
13
13
creation_rules:
14
14
- path_regex: ^secrets\.yaml$
+1
-9
modules/hosts/euclid/default.nix
+1
-9
modules/hosts/euclid/default.nix
···
1
1
{self, ...}: {
2
-
flake.modules.nixos.euclid = {lib, ...}: let
3
-
inherit (lib) mkForce;
4
-
in {
2
+
flake.modules.nixos.euclid = {...}: {
5
3
imports = with self.modules.nixos; [
6
4
# Profiles
7
5
server
···
19
17
system.stateVersion = "26.05";
20
18
21
19
networking.hostName = "euclid";
22
-
23
-
sops.age = {
24
-
sshKeyPaths = mkForce ["/etc/ssh/key"];
25
-
generateKey = mkForce false;
26
-
keyFile = mkForce null;
27
-
};
28
20
29
21
# Primary nvme disk for disko partitioning.
30
22
disko.selectedDisk = "/dev/nvme0n1";
+27
-27
secrets.yaml
+27
-27
secrets.yaml
···
47
47
age:
48
48
- enc: |
49
49
-----BEGIN AGE ENCRYPTED FILE-----
50
-
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvVkdqcFI0czFzL2RiRGZ6
51
-
MWJNMUR2VUlQLzMyV3BEVG11RWpYQmFlK0NFCm8xZkxQUGt5ZjBiak5Pdk5Wdm9k
52
-
amFqKzZaZFpoVWluVmNLZjNmcjhrVFUKLS0tIDUrb0NGL2VhdGI4ZzRUQzV0WDI1
53
-
OFcxZnpiREJDV3llQXlZQjFiTHVHQzAKN0yhSnkFfh/6vhsJjBo2lAfRNQC8nkxA
54
-
DhxxQx/TXwVttEB7fZOGoPFZCtipanLjh/AGpIyRKuAURUXLqp8XHg==
50
+
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxN0p1Nk5SaXRSYUNDd1Jj
51
+
YXNPdkNNdklqNGxqRVpzMFhIOTBTOSt1U2hjCjFGUWVWbUI2WEJTeDluRGk5Vmcr
52
+
ZWkxaW9uVVRVZFo5cUNJUG5qM0oxSFkKLS0tIHA1bk9rQWI1TDFWZjVVdW8wenF1
53
+
R0NkRVZNcVJibktUSlltNkM1aklmUlUK+hgeSpnboQVqbsm7ZMEzHLo/9SHEYAZp
54
+
jKoaTNqscFyAUgsJMbQGsMndRIXQX2l9VrxjbhNu5TD3nKy91E/QjA==
55
55
-----END AGE ENCRYPTED FILE-----
56
56
recipient: age1drzqscusazfcunmt4xkayc3340fpna2yl3eg5007euej05mu7fkswz4tqt
57
57
- enc: |
58
58
-----BEGIN AGE ENCRYPTED FILE-----
59
-
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyVy9CeGg1bC90aHJoNXNQ
60
-
MEdDSnFHdU9ZTkppMEZJUEVHdGsxd21lWm1ZCnp4emtEck5wVDFzZWVhQ3BVSGVa
61
-
VGtRc3NTWnUrb1VkLzZqSW1tRjhzSkUKLS0tIHp5bW9sdEZBRmhzazFoRlc3ZnF4
62
-
NXQ2UXNRWHhmUFNpWW8vY0JPMWVubU0KFnxYfMnEDOBN3TeqdjKN5ZpclhAW034p
63
-
vZX5p2v5WDNo3owtG6EOvUBEFGQmP1DN1nYuqmWkTYcrsawnIHXcsw==
59
+
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyTURiSk40ODRNaHd4QzFS
60
+
MVdheTZPMk5nQmxVU0FDQlkvZDhyU280Qm1VCnB0blFDZmF1S3VLekpjN2pJb1pm
61
+
Rk1aMmIxVmFnK1ZCdVJxTHBKbW5MaWsKLS0tIDY0SEMzSFJXaGFUbVBsQXZGTFN5
62
+
NENOSnhqU2ZPRndlTHpaK3RoUXUxcFUKNpTwfuTSd+h/NhH4Ja8NDRsdyOexCmjC
63
+
6xWOkmaVeeRisExrKNfTb5JVrhte23qBU8U5xhhKpoeOUOQtE34tHw==
64
64
-----END AGE ENCRYPTED FILE-----
65
65
recipient: age1k25zg5u386wqlxf73gyr5f9d7c0q2hawyqrpdd22j94xt0y78s0sgjayuv
66
66
- enc: |
67
67
-----BEGIN AGE ENCRYPTED FILE-----
68
-
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOQXprQW9HazNmeTBSS3Ri
69
-
QjVieUxJTXV0VFRUY3lycGdQamVXb1NsWVVzCi9UVUwyZUo5VmhwY2Vyekp0bUZW
70
-
UFo3RkZheExuSFJ1aUV1bWxJbnJMWDQKLS0tIDBPaW9VdEpJQ3F4N0drblpnOXBE
71
-
QWZzU296SnhBa1J0ZFNvLzVIcEIrd1UK5W3ss3GLFxzhEqXiQk7bLMCBHwc3YxA3
72
-
g7LYbb8S+1e1DF/2TMep6c3y+SeEACu/QGb5XFsD8gbRmeHLACDrQw==
68
+
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjUE42Q2Urdmsxbi9hV2VF
69
+
alRUWkNlQWZKR1F3RGp5SXpCV29hd2I0VWxBCi9jTUVlcjZCUm9MRjBIVkNFakx2
70
+
TTNYMVpER2dxUmhSeloxT20xVjMwYlUKLS0tIFRSdHZaR3pQSkV0L0ozWXFXcXc4
71
+
ZkEwUDRBTks1VzVvZFphTWFxY0FxeU0K49Au0xkt0GL35Cd3ffhVqUO2Jd7aiAfE
72
+
PsMHe5Rl19RARhXg6VdqaAzHHJz8G5qqv3IO3Jlxa5rfQwtMYrGYNQ==
73
73
-----END AGE ENCRYPTED FILE-----
74
74
recipient: age18xgnqqn70msl9wzqpnlwjpupwtkzzyxq65tvpsr7zzpkq7av6fjs2hz79d
75
75
- enc: |
76
76
-----BEGIN AGE ENCRYPTED FILE-----
77
-
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrR1A5aXhFK09QMmZCK015
78
-
anprTEllQnM2OEpTRGViejdaZkZqRmQxWTBFCnpiSnBkMmFVWVQ2N01meS9KMFRW
79
-
N29wOFVxdk8rdHM1ck9vL0VTckh3ZTAKLS0tIE9qVjZ2dWhpWDBLR0E3dyt5blhZ
80
-
ajUvS2VMa0pDRTVmakt4QlJwZy9Rc0EKC8qGsTY9/1TJfZnmX8RaU1juehUxF0ch
81
-
LaunTLV/4eozOljoVwcgMAf4ec5RTYOgC4e2BZ5MLnlx5O4ucQQGUA==
77
+
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxbEhCMS9VSm1BQ0EweG5i
78
+
YndtbWdUTW9wVFVJeUJOelV0UFJQa0g1U1RRCjFmb3ErQkpTRG1CUzg1Yjlza1Y1
79
+
Yzg0TDZBQ3BXWDUyaGxadXVoajBQc2cKLS0tIDRxWE42UlRnck10RFd0TWt0NzM1
80
+
TW4rU0orV09wczZVYk0rTk1hUUFBbEEK8xd0mguvSOEgTX1ySZwrhoP/t3uSI83B
81
+
w2ToACYVigKMSlqPNG9bKcK75XI/iAONG48DQm1Nse3yB9/q3jwd+Q==
82
82
-----END AGE ENCRYPTED FILE-----
83
-
recipient: age1f2pmdmv29e98phn5r9sj9m85ysu3t03wpsf98xgex6fzqkyv8g5shs2sr8
83
+
recipient: age1yl52c6aemw9anmfuqayamvsnkvlu6fmy0kk3gzvrraexxd9pr90qvs8pe5
84
84
lastmodified: "2026-06-02T01:42:55Z"
85
85
mac: ENC[AES256_GCM,data:6QsjRUU5fQo9d40iIvLK02WZmaxSh+jOaFJe9/a/AI2fku9Ucmlwalbi7A00RwYOEqU4CGNZ3V+72MqgGTAlE58o+n782caEMlbBej7YlSFOzI5GawYYwkLflw9di5GAtGKI4gosk/kwhrhUZnmm0U/l5PdV3VBtY0IsQDMDsTM=,iv:8E7ijkBz5nkDu+XZ2HNuvjBQv8ay1Nd4ADH9OVTmZ5Y=,tag:eqt9OOvUTSMR0N5Txqlj0A==,type:str]
86
86
pgp:
87
-
- created_at: "2026-06-01T22:12:41Z"
87
+
- created_at: "2026-06-02T01:50:38Z"
88
88
enc: |-
89
89
-----BEGIN PGP MESSAGE-----
90
90
91
-
hF4DzWFV3zCN1voSAQdA+s7Y5O+8BPCXZTQup8XIAEXK8JxeY9KMyB++LPSpOy0w
92
-
SWVeUeLer1wefUNMT+PPGjg3+F8/23b3aB8FEXsjR/LtNIJ2ITwK3be0y94LA/Xt
93
-
0lwBK8AFlmydvF0iNEFXuDn5gBhuSVPx9jLkMcZoJhKo/9szRkMsgwXsP1lDz78i
94
-
Jtv83HoDkTVd3nSu+bANQPuqiQeNEfNvhoRNI0qBX1UMBS54UIkP9GJD6oBEEw==
95
-
=i7/1
91
+
hF4DzWFV3zCN1voSAQdAKBpV+RSJ0MIEQQ1pUTqUoLJaajLXK4cgGVpITE7p9Agw
92
+
qQjFvZWLuZagbIlLNGI1OmlI8+BFFJG2A+a5fS89ByaobCQQFPaWDSxS2vnWklWL
93
+
0lwBNwAUiXlStIBq0GqB5w7LNkd2R/1j/wzlabQa0fZiqRegpo/PhTfU+HcQhpHO
94
+
0XSk+viCuw6Nea8C+Ve60GR4kUUOIpuyYAfnRt2a7TNJ5lR+X+Jw9VUuOwAxSw==
95
+
=qYe/
96
96
-----END PGP MESSAGE-----
97
97
fp: 3666B440B0E872931B8E78596CFFE3FBA5DD84B9
98
98
unencrypted_suffix: _unencrypted