maybeanerd.bumsco.de / nixos
[READ-ONLY] Mirror of https://github.com/maybeanerd/nixos. the nixos config for my PC, laptops, and whatever else I can find
1
Fork 0

Configure Feed

Select the types of activity you want to include in your feed.

feat(sops): move to post quantum key (#118)

authored by

Sebastian Di Luzio and committed by
GitHub (May 16, 2026, 3:30 PM UTC) 00bba3d4 93f365a3

+143 -120
+2 -8
.sops.yaml
··· 3 3 - path_regex: sops/secrets/[^/]+\.yaml$ 4 4 key_groups: 5 5 - age: 6 - # Main YubiKey 7 - - age1yubikey1q0hhlftpf7cllphgd705q8du35ej7tangq5r8pn2r8u9mdhljqe2uww90km 8 - # Backup YubiKey 9 - - age1yubikey1qdh7kds3wxl2y77hn7nv926kyjyxwyknc9z7jrx29wt047s0adcwwxau087 10 - # NixOS host ssh key 11 - - age1rmak02xy4my3q56480jjswg0q9nfgpn6qssfg8rst4p9whmg5ugs77tnvf 12 - # macOS host ssh key 13 - - age13pntr0d08pl90fzm6t6w2kaz2zfmnnt7hy2ss9xczg2pstypqqrqh3p7yw 6 + # shared age key 7 + - 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
+3 -3
home-manager/development/shared.nix
··· 132 132 133 133 ff = "fastfetch"; 134 134 neofetch = "fastfetch"; 135 + 136 + sops = "sudo SOPS_AGE_KEY_FILE=/etc/age/keys.txt sops"; 135 137 } 136 138 // lib.optionalAttrs (pkgs.stdenv.isLinux) { 137 139 rb = "sudo nixos-rebuild switch"; ··· 141 143 rb = "sudo darwin-rebuild switch"; 142 144 rbb = "sudo darwin-rebuild build"; 143 145 }; 144 - sessionVariables = { 145 - SOPS_AGE_KEY_FILE = "/var/lib/sops-nix/yubikey-identities.txt"; 146 - }; 146 + sessionVariables = { }; 147 147 }; 148 148 149 149 ghostty = {
-3
sops/nixos.nix
··· 11 11 lib.mkIf (pkgs.stdenv.isLinux) { 12 12 sops.defaultSopsFile = ./secrets/nixos.yaml; 13 13 14 - # In theory, allow yubikey support for sops decrypt during build, but it doesn't work 15 - sops.age.keyFile = "/var/lib/sops-nix/yubikey-identities.txt"; 16 - 17 14 sops.secrets.immich-api-key = { 18 15 owner = user.name; 19 16 mode = "0400";
+37 -35
sops/secrets/darwin.yaml
··· 2 2 sops: 3 3 shamir_threshold: 1 4 4 age: 5 - - recipient: age1yubikey1q0hhlftpf7cllphgd705q8du35ej7tangq5r8pn2r8u9mdhljqe2uww90km 6 - enc: | 7 - -----BEGIN AGE ENCRYPTED FILE----- 8 - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHBpdi1wMjU2IDdSYWo4QSBBaWplUjhk 9 - WWdFRFVNRDJiZ3N2WUUvalN3WFphRFM3Y0YvWXNhZ1hOa3Rqagp5UEVRcHAwVFIw 10 - RTExcEp1bGovVkVSSjVsQi83UEhMYkM3bkxiaENkUDJnCi0tLSAxUTdYZGg5YXFT 11 - QjFUUlpZM2tIdHN2a3VMa1N6VjVSdU4wOGZ5bm9vYVlJCjJgbvFj9eNx1T3Qbg+p 12 - qmtTao+sHHr6CQeE9X06K2go2fqsV9V1w8foXTODYka+lGQmVwMS7YwuAbkm95Bi 13 - 6Co= 14 - -----END AGE ENCRYPTED FILE----- 15 - - recipient: age1yubikey1qdh7kds3wxl2y77hn7nv926kyjyxwyknc9z7jrx29wt047s0adcwwxau087 16 - enc: | 17 - -----BEGIN AGE ENCRYPTED FILE----- 18 - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHBpdi1wMjU2IEtwUjZtUSBBK3F1N1NC 19 - QmxhS0xpNThhWlpzWkd2a2twTTE0RlBlSmlJSkw5OHdBU0Fvcwp5R0J5OU05bUFv 20 - R3BQNmF2V3BxL0k2RU4rVFZHNVN5NlF6cFFzUklRV3pJCi0tLSAzblVJRitHSEc4 21 - NXk3aGF1UFllcUMzcVk2TjhYeXlrWE9NM3doc0taK1hrCvnjvgLuyV1qkPpooYhu 22 - srDhZbm4vu6yg+MwyKQa/LfPTPIEnLgfapwgOdXK7vf0Vhr+P/PhuSfyo9cizNdA 23 - t3w= 24 - -----END AGE ENCRYPTED FILE----- 25 - - recipient: age1rmak02xy4my3q56480jjswg0q9nfgpn6qssfg8rst4p9whmg5ugs77tnvf 26 - enc: | 27 - -----BEGIN AGE ENCRYPTED FILE----- 28 - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1eThQUjRLTk5vQWtNeDl1 29 - cWtCalZ6QTNGTE1NNE4rK2c5bEpnOCtCWXkwCnd3Y1hVbGpjUlI3Y09qMTY4K2cv 30 - WEhCK3ZKdC9CSWNYNWFCUzhGYnVDWDgKLS0tIDBzb3RpdWZJQnRML2VrK05CalBO 31 - clhhOXRHU0VTbGw1d3JML2xQeFQxTmcKQOx7tlolGH3EpHKldYeYdzCSef90DH7R 32 - ICw/tvWqdW+JJy8MuKkCT8Qxzfe7iwTE8MNZf4YxJRgOKMgs9UnLJg== 33 - -----END AGE ENCRYPTED FILE----- 34 - - recipient: age13pntr0d08pl90fzm6t6w2kaz2zfmnnt7hy2ss9xczg2pstypqqrqh3p7yw 5 + - recipient: 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 35 6 enc: | 36 7 -----BEGIN AGE ENCRYPTED FILE----- 37 - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArTk1jVks0RHdPQzlhTzRz 38 - RG56K3pIZHJ1WEF0U0hOa1BSSWxFczVISG1JCnYvVnQyYnlWOS9ta2tSNEhHQmwr 39 - Ty85Yk8yMnNPSEVWdjdJN3pBV3NRR0kKLS0tIEdQNnZ1WjhMeGZSV3hmVVRFajF5 40 - WUI3TlBwaW15Sjg5K2puc1Z4UFlzSmsK6/jWZJkpn6TVBMkcm7PP/qnD/hR+D9Wj 41 - jS+xwqIiouibUcJPMJp7AniLZngEZ4a2VpX8wc2qbFHXE5p2A1vOgQ== 8 + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IG1sa2VtNzY4eDI1NTE5IGZNaXVqejdP 9 + Slk3ZnU1WEVOK0VJVFNpT0NKNEY2akhnbGU4QlZEMkVWNjZHZWNudzJ0NkxkM0x1 10 + ZmRwUi9LTG5PUXdCMFpRY25XaURPS2JlMHdqMXpOMHJiU3B1UWZZOGJ5Y2kyNjZK 11 + ZTh5dlZnRis2d000VVJyTjA1NklTaWNBNGVWcDI5dVhHMFpYZnpwQ1NBRlNWKzFr 12 + VHg1bHBzWUlPK3VJa0wzOWlaVUNvRHlLTTVzUDB4dnVRZmpiZEZFSWswb3pDUmNp 13 + REhYbHlZMkNwNDFLV0xXdVdVa1Z4Si8zc3VvY21MWVJBY0FkaWtrOFRHM21KYTI2 14 + MnNGVThyZzlvVGpKSDMwN0JFNlJGL3Z5SEhYd3JRNVpzdWF4Z3d1bTZyUmJlaTJ6 15 + Z2RwbG5kZFNLYUVSMjBhNjJEOFUxOWxmbktqNzZvMEkzTmxlcy8wNXBUaWtMY3BM 16 + UWlKUDRQdVNBd0o2SWI5ci9SWTBjTVlkZi9yNGdaNnM4eXFrQVVOTC9YYmRQQlZR 17 + RERwODNhUEhpNWo2Uk4xcCtrSk5RU2hSWW1Mb3RHVzV2YTN2UjdmMmtHc2habFJv 18 + WHkrZU9uTnRFb3pvVTU5MDhoYXB1b2ZaUlErM3h2ZnFlVkhQckU2UTU4L1RjVG8y 19 + V1FpQ0RaSkptZEUybmoxeVVRSm9yRXZGN09GcnI3RVE1UUpmNDhSc00wYmkzNHpC 20 + djVtRzFNSWtFelhzZ0UyR3Irc0ZrOC9uUzdGR1VHUlEvSHZnTEkrakFzWTJobnJO 21 + WDYzcWRCUElrYkJlNVhvdWhKbGVXRDJtWDV3TlZSSCtxMmthYmNHVmVMVm1lNmZW 22 + QjdkSUdsODFpUDVnNTBXUDNhMWtRL1p5WmRuNWlZQU1JSUxxUDdEUFVQdVB4d2NX 23 + L2hQK09JakN4TmNMZ2hwTUhqRkE2SzRZbU04aHRRd3duRk5FMTRTZElpNUVlMjBK 24 + WG9MSHErbUJxYndQWjVjVkU3TFNwWUhZY3Bma0tQOEg0R0h1Qndkd3VKS0xmVGRI 25 + UXNpdVZUaEM3Z2NKNWFkN2dLVnh4THJnRTMzNTZzbkltdkFFS3U1eU9MVG0vbXRQ 26 + YkhYL0hJYWpVeXpMMHNMUHRXVTZzaWdlVHdnU3VpRzVjR1dOdHVBOXBlNURuWHBZ 27 + V0pQOEV4OU5wY2IzdGhMUlJ2VEFRejdOa0Jva21zTnpxL28xbm96cDZqcVVkdUoz 28 + NFN4dWEzWVgyWXhDY09HNmo0UkN4OVpXK3FTZ2UwdW9FMm9FTTZ1c1NwazNjbHdp 29 + WlBMeDM3ZmErY0tsQ1U0QVdUUTIvZmZlZXZtZ01yeUs3QlV6RUNNU3JPRENER1ZP 30 + M1hocmM5aUpTWERHVHQ2M21ESDM3MzViNUMzeWVlZTBRQWFoaTBtVnBKZWxNK1cr 31 + b1c1ZGpiMER5VldJeWZKSk1valNPd1BEak1BUFdEZE83b1FCM2gvVmJpQW1aNFFt 32 + VTNBb1pwS0gxNmt4NjYrenY5cHhwc0MxeXR4MzlZSVNqZDBpdW41QVFlaUNxZjl2 33 + RkxJVjBLY01lckdGejJZenhTN3RlaHRsRVo2M3BkdHN3cmRMdTZLN1QxYzZGazZN 34 + aktNbTg5R24weWt3L0Q2TTM4QmJvZm1aaVJwUHh5WXZ0WFRhQ3ovTEc2MWVVdmtQ 35 + c0ZYSE1qLzdaNzZHdFdiL1BvVU1vVGxnUFpJZDcvM3lvcTRQeVZ4V0NCZ0hJdjgx 36 + WHNIaDVldGVWcFZBL3NScmZKY2FtbW1xOGxBeHQzdkQ2SGE3SzVIY0I5RzhWQ3NW 37 + UGlUUHI3U2RQTjh0Vm81S1NkaC8rUDNDeG9XSzJzT0hNeWRPYXFpOUxrTTMrcEQ3 38 + V3FxWEF3elFOL3lsQlVMRUsyRi9LallMZlBESXhmSlVCcUI3amlvdVRhUkt4ZTFU 39 + amRzajlOSjhFeTdIVzlSeFdoV3pscW9iYUhiWGE5SHRUUE04TDYwS2YwYUNBZwpz 40 + NFZWaTV1a3ExVE9uUGR2WW9hV0tqd3VMN2Z5Q0tMY2s3WlJxdDhJcy80Ci0tLSBP 41 + YjQvQXFhWWNKVnhpTEdRaEdQU1FoUjczMjhqem5wT3FVb25hUXR1bWlBCiJoA6zF 42 + QjWhqmehnJgQVpPgPLNpx0Qp0oLr/dy/KVZt+hd8ompLJYfI8VhNxoSgp8MdIaPz 43 + IhEXwC0Jiuj21BM= 42 44 -----END AGE ENCRYPTED FILE----- 43 45 lastmodified: "2026-02-20T15:26:41Z" 44 46 mac: ENC[AES256_GCM,data:yIGrHrdN32qMwWwD1QVeEaMyKMETJU1Fm9XlkyCwp3fGKje1asEtTojhUwvSrE8P06Nru+mWwSVamcv8qlwOlfUobhC/xtFQUOMsf+bcEGnDo/A9hElXN4NqeyuRdkSsdoPRbaoylqmjuwe8vcmf9X/epw7bg9PERsrTSTowAQM=,iv:1qxrr1J1VKy5NpkdAY5M4qH9peFS9DCCmk03z4yIUEw=,tag:Mlt3B036cvK7PKz71eI4tw==,type:str]
+37 -35
sops/secrets/nixos.yaml
··· 5 5 sops: 6 6 shamir_threshold: 1 7 7 age: 8 - - recipient: age1yubikey1q0hhlftpf7cllphgd705q8du35ej7tangq5r8pn2r8u9mdhljqe2uww90km 9 - enc: | 10 - -----BEGIN AGE ENCRYPTED FILE----- 11 - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHBpdi1wMjU2IDdSYWo4QSBBMGdGUHVB 12 - UnlON3ltOUZYLzFwR0x6Nld6SGhqaTVJdUI0Y1BLcTNweXhjRApBTW5TU01PWjN1 13 - QmxFQjI0cnZvNmRWTjQ0Z1luNmI1S08waVlXZUNvVVcwCi0tLSBNNyttblJYaSt4 14 - b3JZMEVBTkhZQjBKTVpxb09zMmJWTGxKdDZyYVBFVFdrCi6t805pLq7u143Ifulb 15 - eJZhSOwrb0GHHMt1Sex/xYx6SQZu8ftRDlA+z8lrlBZxOqSrdt7Cyb3pO5LalqSk 16 - VUE= 17 - -----END AGE ENCRYPTED FILE----- 18 - - recipient: age1yubikey1qdh7kds3wxl2y77hn7nv926kyjyxwyknc9z7jrx29wt047s0adcwwxau087 19 - enc: | 20 - -----BEGIN AGE ENCRYPTED FILE----- 21 - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHBpdi1wMjU2IEtwUjZtUSBBMCtwMjlh 22 - b3BvNlFIS0RkOFhmQ1FFL2VndUR2Y2NiL2hNOFcvTjRyeVBSaAp4VndCZG01ZW1q 23 - c2l4S3pDaXpLRVl3S0lBckQrNlIyUmVtV3E4b2dBbzM4Ci0tLSB1eG1Ga2ZRRFNs 24 - cEh4LzlhdFk5cmR0aTBma0xEYmorY3NLekk0bDduRzRRCnJw37tIkNtw3l5t4T8l 25 - GwUsQyFvLUU+1nAJy+1AsN9P4F2IDvryqdBFlvJmTyEnQBRbb5X79xK1ZoGrUsV7 26 - KMI= 27 - -----END AGE ENCRYPTED FILE----- 28 - - recipient: age1rmak02xy4my3q56480jjswg0q9nfgpn6qssfg8rst4p9whmg5ugs77tnvf 29 - enc: | 30 - -----BEGIN AGE ENCRYPTED FILE----- 31 - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1NFZ6M2RBdCtUSnh5Mmov 32 - ZHAvbDVlZEhkeDZaWEhqVDlzc21kV3YwTndJCklaT1hNckFyVGp1WmZjWkxRUmhD 33 - Y2xhQ0EvL2hQVjJXa1RkUVMxT0F3b0EKLS0tIFV3cGl3Uy91RjBsWVlYd0JVZGZW 34 - OHdmOE1rYklpVUdCOGtwOWRZekoxb3MKj971U7sQ5CCk7TPjggIKizkuS4uVJFdI 35 - jZ+0dnoE4XzUU9zy2LfK/sISWPFB032Re6Vp01EokSkY5OGt5xWf1Q== 36 - -----END AGE ENCRYPTED FILE----- 37 - - recipient: age13pntr0d08pl90fzm6t6w2kaz2zfmnnt7hy2ss9xczg2pstypqqrqh3p7yw 8 + - recipient: age1pq18nyrkmxgteglqnq8qq0k8ya5a8ycuexskcdl2cr8m9398wrcx6msfwaq9qhew5vhge6hjzvgl7jgfypvwdjxdf2l727rmfa2d224qc4ec75cff5aup02q2s7cly9qjr9nf323nyrcuac975z23x82karhp5l4y4mp09uuf7yqrxr2a3veclef2ehgp3ew4fpl4vmr22ejpqghty67p4ahf30a4sn60mu8ft05mx8g7z7g3tw89qjyaw6h890wqvhly0lpyu9cwg2q4pzywnuc9sxvds7a6equr3msw243mqkwspd9gy60899trw9rxer362ysrcj8v4ydj2t2ss8rr3vef4lffquckrgs6jpyzf4nltvsp50z2jdvuhd05kgyhen5ze83cq7hpxemwe2v4q9ssdgzyjrt6ckyhempxmkpppcmg3xea5mpk82sfczsquwuxtywxerpxmn0069d2lptsuenxfatxu3rlrxjj0p4n8kq489veatnzqtc9pv3eaf8wuk2fwsg6nsczunujnudtrz4923r8zt56pywpcjrun85gqp6ug94x7mpf7xf8uexr2tvsks2sz42d6kuepeuk6sfk7c98s7c2g9n9f77yyw2scgaectpt74nv035zzctp9e47gyqkz9h7xfpg3cuzrqzze4rzczay5gg8gff8pa8pxr433cpgg8kkctw5h6njk98y0hsdf0jrdv0x2xqwzltg9rsy7pg65555y4t6gx37v7hxhka0zd9522el3rnlytwqw2e2slzgmrwft04stzfsfjkn83wqlq8fdmxfz0quy44726fr4stsk8f9nrgwwgrfgt3tukwpaukun2f988wlywjfgtzlhn5f9nfy2wl9drprqx3pryszlnk35kcywtcmq0749qy3erxdfjkc5y3s2vnqsz6y564ussnq08sfpddzr9c8q30du6sm5vxa7r50a8dyys0pfq75f9ffnqc7svsmszkufszxfn0kwp444mezlyz4t9j0nvnwfwcp93mwg8y7uy4tvxqplec9gqv92hg9xrf6am2cnxvcu9zzhnkxvzekrgl3h8t72nsswaw6z8tpv6tm39q9dkrsmxckc072v45s3rsh6p9x8ve4luwuc67fsccyjmeyayca7upn7rx30ca3unp2cle5anzxsnhl49nqvc6paape4lee2p07n93sdwpdy3htxuvkpwcjzmh9gpynzx2h5wjd97t2yk77nncwcktm445xtccyt0gafm0ktsx2m5drey2j4uzdduxqtj34ucvjvcdtfaqapadxqgt429u9ncyukhz9xhfzt5s2ueqzajqzzcamezzy7829w8t9kjv2pv8xvcdjz2p5td9yvz5rqdgryqhk459wdxdtjpgt376a7a6xfzve5cf7hzyh7k82cc4dnhukfumxtv8q8ctp8d2n0ffq6cffehf7a6ldqgs5d7qfzqv2lshkkvesj5sgkkctuzwgc4728mquflyc6p32xygze69r5zzc32c730e6mx5mdzqx4d8yu3kjgmtya0xzd84pg9suyld3t0u5al95c9983jjm44336r9wk7c4aasguzg9dcwy4rgzup29xxpdfcsnru20au8t2v8ky5kvus5m8jpzzxr2g6sa6306w2vx9t6g6v5py2r65gkek904wakwa4g28et33ve65fvckfew75nqwh2u73p64yfgkvkwc8jc84fstwk6uh0cuhus24xfwqth2jnx4yrducmcayfzmfv6hpnqs526qu0s5j2kp6nv3hfas2fgvkwm8cwk0t9drkx998s3rr8ep3s7l7yxl2gu5qjksukkur83tkvdxahr3gz0tze0hugjt4nclw2rtejfa5ktpcz6fcj6westqe3wv2a09wntf8kw60x4uu79uukesn7sefk00kq5upzyyl 38 9 enc: | 39 10 -----BEGIN AGE ENCRYPTED FILE----- 40 - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnRXM3eDNUTFZJTE9zTTRW 41 - MU1CT2dkUllEODFBTHQ0SmFRbHkyd09rd0RrCjlrZ2dxUWVpa0M1TVBmWlprSUt4 42 - OHY1WnJmdWgrQktRTlcvWmNwZ3U1OXcKLS0tIDJTWTdSN0JTMWtYUXhGYlJsZEhk 43 - MDJzUjVJbGZTd2FKK0F0QXhHN0lpNE0Kb2vRkiP58uuKNqP+ek6m97Sg37nJPTv/ 44 - VubVZ4nOxl/mo3cxwn1qDq5nAVkjAtt/ozW9vmTm4Q0W8201o0YYNg== 11 + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IG1sa2VtNzY4eDI1NTE5IHFySG5EOHRJ 12 + bDRra2hEKy8rdmdHODgvUlp5R1V6UHRkckZMVklseVlXU3Z4NnZ6VVo5S0IyZHlO 13 + ajRxdFJJRElBSEp2QnRoSnNQVDlKa2JPUmxNQlhXWm1Oc1FCRXliU0NSOUwzd28r 14 + SDB2RGU1Z3ZScVFBaHVmekJUaFIyYlphVFl2aDB0WkwyTnJyampJSTlXUXN5S1ht 15 + d1EzeEZHeC9OOERjUnpxLzFseGl2SldRRndCSTg1dk9leGd3OUd5YkdFTDRQRnRU 16 + a244SlYxMWJQWHpOUndncU9LanlKdmxJZXM2UlZLd091MzR0ZDNQNU5kWjFLRjNs 17 + ajJUakpZM0liNE9YZ0xJUDJTTmRqODJwMTR1V2FmRW1wVzBXWnpQMzRLVzJyVnRE 18 + TzZsbWlaZmo0OEZYMjNUaEZ6UVRFTHczTDRlRFhOQlArNzhQS2hmaDh4RENqQTZN 19 + UUoxT1JMZ29Ma01mZlNMRUE4bHhSWW9XK3JEY0Q1TFJOTDFZdFVlV04vWWR1cXFh 20 + Z0wvMnJ4amt0WHd2NlptV2V6blZBTytING4wN1ZHdUVyd1FOSktwTU5QZTU3WVE5 21 + Qjg2ZXluY1dTaldWYXhacDBtMm5HTjk1WTQweTd4NjNIUlgrelFLUnNWbjJ3MC8v 22 + MVV5clpDSCtxM0pOUC96NXdTa04zUEYzaEY0b09Uc29qT2FUemR3blYzWnZhRFRs 23 + TUZIa2o1YWZZYXU5dUZmZ21KQTlZRm9GRk1QU2Yzc1VDVkxYRFFOQUlhKzdrM1cv 24 + T0x1aUxLcExOY01ObkhQZWJRMm40MmlrVHlWSE1lUHFIWlFSZ2FPZ2JLMlJINzVv 25 + UGlUOHh1WHRrRTlWeU04dElqc2s1NDh0MFVPMEZNRS9jWDJhMTdITjk3bFlxR2JT 26 + aVVRbHdXMytPYzBkNnNkVzZVNGhUQ2JnYzF4cFE0SXd1WG03Ny9mWkg5VTU4djQ4 27 + SFd6K2VVV0I4N01BdkVaSC9UNXJKSm5PQlhURzNodEwzMkc1a0hWQ05hbjdyVGZp 28 + UzRqMk1BdjhtMXBlSmdTWXBHZFB0eGhoa3dyNFhrOGZhMmQwdXZNWWRuVmV1V0Fm 29 + cGhqb2NZWXNJeEhuMURLY0lxSEJKNWdPcnVQcnpTdTU5VkovV2IvR0VCaEVwU2d1 30 + akJLcyszN1lNNHlkUDR6TkRDS0JjUDNZTXNSWmRzbGFZTlVaSzMrU1pVcHY0dktD 31 + U3hRRFhUWUZLVXpiT1EvcHp0bzhxaTgwTmdWUE4vd2lxQjhUNEx6RmFkYzh5dld2 32 + dnNCWmR3dlZrN0hiTTVLUFVWWlVUYm1yTjFoMFFBbHdwVWR2TWZZeC9jbko4WlNq 33 + cUlsekR1a2RUdVNwSDJtVEhTTnk0YWYrWWJmVnEzRktPdmoxYTIvbjgvUFcwRjlE 34 + V0ZTR0w3ZnNTZDdmWmN3MXY4Zy9hVWh0MDZGcXlEd3BQaTJpUGFieEJvQnVPbTMv 35 + a1I3ZkxZaGJ4dUJUNGw5U0loRWI2RFlLR0lZR2lHSHpTRzhFNEorRTdENFQ2TUs1 36 + QmZ3OVdxNnV2OWFPQXBSemlObkpHLytlUkg2NlFqcWVVYW5pUVh5RFRyeDBWUTBm 37 + a3ppZFYwWGRSaE9ScWhvbkpyUUZ5MUh4OWtJT3pnM2luakhUeHBhTmZJdzErbThD 38 + UlZMeTNMMVNSVFp6SVRjMTdnY0xJKzJhYU4vZmF4bkdNb3A1aUNvSjdWTWxhWXRG 39 + VFB5dFJ2WlBCbEt5dGhBamFpWXIzczdJQlpHOC8xbldrNk9TZmc0d1NCL0w3bU5o 40 + SC96VldRSzhnV0I2WlBaYVBjcWJ1bFlOSnFvTEFoMHd6ekQ1K3pVRmM2REk4UFo1 41 + MWhOWWdDOGttT0xsZ09MZ3pzQWgxVHhKcUR2dGxpVHdodkU2UVRhSHgvdXFzMVZw 42 + bXNUeGpxZldPbkEyeVBvVHFqYUpNMVI0SXZMS1hrWnlHUnpmWnZ2T3FOR2tPQQpP 43 + cEc0Y205Ym1PUXVBWHkxZHljUWJac0R1Z0hydmlUclM2ZTdZeUVMSDlVCi0tLSB3 44 + TmhxcE1ERVJ1aVp4YmVuVlpFdTNYcWRlWUo3UmRaSTREMVdFeEh0K05FCqcK9M2Q 45 + 7FQPDGwgGHcS7rJGbc/n+Rhnl1e87ZeG25ydF12n6f3BbUldhnCojfuRRcR8+9Xw 46 + QuxufBPB6QaMWDw= 45 47 -----END AGE ENCRYPTED FILE----- 46 48 lastmodified: "2026-02-27T09:59:57Z" 47 49 mac: ENC[AES256_GCM,data:4vDTQPJJZcPnU4K1xCNbOZ6OSlhqVnaPh3+e+fFZlFnF0pU06O1lsjqaQqoMOFI4NAI73dd4WYJmlhdAtKBrQpbE7Fod1ywkfd4iq/iuN3hr296GKMv0kzKKTZAZYd+7WSMcncEKPqQP4Z6sPpH1yxXO/E4Tr0t3AJF81oYPUvE=,iv:EOsGHuqTGtr6sujDIP2MMxI2fiPcl9Uaqq8JpJTyu1A=,tag:F6jkls0aeJh3zhOKwP23Jw==,type:str]
+37 -35
sops/secrets/shared.yaml
··· 3 3 sops: 4 4 shamir_threshold: 1 5 5 age: 6 - - recipient: age1yubikey1q0hhlftpf7cllphgd705q8du35ej7tangq5r8pn2r8u9mdhljqe2uww90km 7 - enc: | 8 - -----BEGIN AGE ENCRYPTED FILE----- 9 - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHBpdi1wMjU2IDdSYWo4QSBBbjZiYmE3 10 - OEFZMDBTSC9kblpIOXQwTnpoQksrRDBEME5oOU9FelZKTlhMQgpnaW04ZWhIZ3h0 11 - dDhmZDJlWm41aG1OMTZWcEhId2lQNmtYSFA0YnRLK0hVCi0tLSAweWFvOVAvVUQ1 12 - OUMxQ29MdkxPM1N3SUJUV3hFaS91U2VEODRVeXIwdldFCgXevLa50JxxLKyQ59B+ 13 - sVhqhhA7FlexE5zNihx3Mm+IVz3skC+dxsWhoXpqHdjer4KDVNQ2M0xhTdNv+ohn 14 - 4go= 15 - -----END AGE ENCRYPTED FILE----- 16 - - recipient: age1yubikey1qdh7kds3wxl2y77hn7nv926kyjyxwyknc9z7jrx29wt047s0adcwwxau087 17 - enc: | 18 - -----BEGIN AGE ENCRYPTED FILE----- 19 - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHBpdi1wMjU2IEtwUjZtUSBBMXNoY3Br 20 - L2VXNEFlWUwvTDRmKy9RcDd4RUhqVjFVbm9FU285eUJnUnNqNQprblZodFgyckda 21 - U3FmM2YxOEw0U2EySU5vZEE1S3hrZDNHclpaM2dTS0JjCi0tLSBhNDJodzlsRGRG 22 - OVpqTVdDOGJiQk5MSmhXMndzbEE2c1NlTUVENTZjdXZzCiss2slNr/SNGwsuKUlC 23 - L+WZNKNsSGcPywrKWRNX8fjgvrAHrJ23byCPMedNNMfbhYMMZzh0MX45XovIIAfY 24 - 2qo= 25 - -----END AGE ENCRYPTED FILE----- 26 - - recipient: age1rmak02xy4my3q56480jjswg0q9nfgpn6qssfg8rst4p9whmg5ugs77tnvf 27 - enc: | 28 - -----BEGIN AGE ENCRYPTED FILE----- 29 - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1V3Bja1ozK3hrb3pGbi9X 30 - OE5uUStFcncxaGhGcmZoRWg3cVZqTjlaUkhzCjFNeWVHMzNQMER6UFh5UHVqV05O 31 - OXZycGdYU0YvUXVXZklWZjJTR2RaRXcKLS0tIGNFNDNlTUtxZDYvb3M0S1JPbXVs 32 - K3oxd1FnZGoxcjhzS3FTZ3BNRDRDNkkK69CQxSEWO4gHx+8OfeUaDziVN1nrUNu+ 33 - wb+mAnk3jWP69PWTK3Tiq9xHtHkkhedkMYXhmgxoqc9KEeP3ey/M+A== 34 - -----END AGE ENCRYPTED FILE----- 35 - - recipient: age13pntr0d08pl90fzm6t6w2kaz2zfmnnt7hy2ss9xczg2pstypqqrqh3p7yw 6 + - recipient: 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 36 7 enc: | 37 8 -----BEGIN AGE ENCRYPTED FILE----- 38 - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByU1FyL2ZGZlpnVEhLdWNz 39 - aXVNR0NhQVIrMUN5YzZrSHI4cDZrQjh5Q0c0CmVEZ0JOSzZqczhaWFcrWWtBRHBw 40 - VGhqMjF0K0lqb0N5MXc0cVRqbEhoZUUKLS0tIDBMdEpReER2K2d4U24zUVVUTndQ 41 - NXlabFd1MVlrVWlXSGVlZDJrbVBtUlEKg3kI8G7VISYtM5dAeD/08HC5afI0EilP 42 - j9n9ZxXvZEDFuhAH4Ee7dMvBlfu8gO7udXFE8YEck7Bftj4IHdvQfw== 9 + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IG1sa2VtNzY4eDI1NTE5IDlIL3FOUllu 10 + WlFkRlh1cFpiTHhJbTlhMXcrbTZMUnRTa09OSENkWUFsWG9oMDlsTVV0NWZCY3hk 11 + dlVxWldhdXZ3Tjc4L3NZS1pIRVZEM2s3Z0FyT05TTVhlaGdtZmZpSnRteUprTTZi 12 + LzdDdWJzOXV0RERCUndCLzdEdlViQ1l2cy8yYkJRMXREdHhjZEJ1YzBqVEdyejhp 13 + YThPTjl2TktMeSs3akxpaXJGY2NidFB6eHExL0czanU0aDExbFNjalhDZFBsQnRo 14 + aFdFUHJXOHhXalMzYzErRHRqZDV0SU5tS0ZFMWZVbk4wcFQ3NWRSTEhNcGtVN3dE 15 + bTZHYjAvb0YxdG84K3ZFQzQ3ZWdNMVFNZ2dVaWM2cnBhNTFuKy9vYW42NUtTSzVu 16 + OVFRRWQ4UW1hTC90ZGxkUGtSbkdiTU5PMkVWV0QzUzRqZ0loMHEwV1VCVkFKUFZl 17 + Mno0bk80ZDBXYjc0VGNhMVZjcHF0WTM5cm5ieVhmNGhCeVdURmZITXczOWJvNXJJ 18 + V1FNL1NZekthTGh5dWlhUG1oSEJSdUpEaEhVS2NkeFhVbnc1dXlLdE9vY3BUMnhQ 19 + S3IxNjRDejBQVk05aTlZdTc3bjVDQ3VSUkxyOThzNmlET25XbmRPY2NMRXNHUUdS 20 + aUU3NndDbnJuRWdzbFJ3QWoxTEpjU0Z3UDh6dmpqTE1tT2tUVGxaWDFyK1hzR0Ez 21 + NzV3Y1FDNFZXL092eVE0b3VEdkhIZ0NVOEllL0ZXUDhNVWFiOWpuNUtQakhJOHpw 22 + VGtlMnJ0MDQwRmZMT0x1UHh0SkJuQWFVcHN2TTEyOFBseWVFRjQxbTViT085RW9y 23 + NHpMZGJESll0dzRNd1RTVkJha2hZVHZLNXN5ZHRQTVk2bCtXd3RqWWhmMEpQWmtK 24 + OHNnNmZJZWJ1NTN5RXFMellWZDNhSlkzbVJMNEhMRzA5MFJkb2NZbEljNEtPOHAx 25 + TGF6MHZLbUJIajlsRVNOY0VXbVFjS3hSUXc0QStqdm5jKy96QWwrQ21BRWtlNVRh 26 + S3hTYi80c2ZEV3FwTTE4U2xmZmpSMWNxYmFESmszWDZjSmZZVVBkUVhlVHpIS28v 27 + TjNXRzNWTlVRVXc3VUN4WThoM2NVb215TmhJWXplNVVIdjd0Y1NFSHNYS0o1MU14 28 + VnN4dy9mbzZNK3l4U1ZSZG16MHVZbnJ6alBEV0J2RW9TcUk5dWNiYUg1WkYzQ1pC 29 + WjBWTXRWbnhJdldGWmpBeTR6SkpsejZiajNoTlpCakp5TUZlL3g5MVpCd0Z2YzR4 30 + Ykl0SnE4VEVNajdJeUhVTXBVcUFmS3U3a1BVSVNRaUdaTkg1RW9scXdoRnlGQ0tS 31 + bW1aZ2cxcUo3NXZYdjlnaWVVb3JFRlpoQXVJOHdLYnl0b2xZUndSMTd0WXE2U2V3 32 + dERTNUtOY1liTXF0MnNPaWhRc2I5TmRhZzVMaEp5dmRuUVhMZmRGay9PNmR6TUxI 33 + NzZNNndMUVEraWorYnNhM0lhLyt1TnczLzVJUnpHSU1XUVlLT3FoTzluM0JxYzYr 34 + UVRaaGNiSEM2c3NiRDVDVHNUWGlzbDNld2IyUTdQTWNzWStzdWVlRFFtcEkrR1FB 35 + ZHRyM2NzK3c5bVQ0K3FXYnpCRjA0Z0FYZk5yQkpVRDVKYkV1MHhuWGJjY1pvK3J0 36 + ZWR1eFN6RlhnNzRKZUVzTzdGOWN2bTVKMzZ2WldBRTgxUEtBT0xIbyt1RE5QQmdt 37 + ckUxNkF2WTRkTkNpTDBXMHZsRlRKK2pZVXlaVmIzUFIxSjVWQjlraDVpWUtNMWFJ 38 + MzNOZ0drQ21ubjRMVDFmRUlBRDAzY01TRWY3bzJjMVlzVHR0OEhORngrdzRjQWYr 39 + dUh6Q3UrOUxZUXl6bXAwRkNJYXdKVzhXWGcvVlBwcWxoNVpPNHROdGRMQS9CMlh3 40 + VUs0VUxWUS9mQlBBdHJGcUUxSDVaeTR4dnBQMi9yeVN2Zk55WkR4aXVUdGxaUQpH 41 + OG8weGdTQm82MjJ6UnNaU0RPdTV5d2xGb04xNG5wK1FuQnJsWnlCRkhJCi0tLSBI 42 + T25hNDBmY3VOUDI1SzhIYnVqSWgwa0MzMlZvMkt2WkJqcExxamlTU0NnCgATBTtd 43 + LXQSGsHud3Wogz+BmHdsAtUV1dM74QmvBWncOVWOx1BDtX1mwgipcaLFXsL+jfOV 44 + EmKXh13eC4MO2CU= 43 45 -----END AGE ENCRYPTED FILE----- 44 46 lastmodified: "2026-02-27T10:01:26Z" 45 47 mac: ENC[AES256_GCM,data:hYYmGQFUK6FXu0d+yUvFQCrHIWaVypHGK00tViqkWFuvUMMboNSUKVOgkpUgGsiBIoDgLch21OkiNVyAADXIlLTWkOD3SotVbNzJlvcPcAqegm9yHaoO+ZWGudEp9CKHrf1z/UB/ijbptJUZQeG0uljznMxSvvSERTVubxNovmo=,iv:/Rl/qybDU1TUJBQUzzmgbB98wT8UbnEwLKrUr9uXpEc=,tag:4UiWYbpXzLrkehTdoSSoig==,type:str]
+26
sops/setup.md
··· 1 + The secret key is stored outside of this repo. To decrypt secrets, add it following these steps: 2 + 3 + 1. Download the age-key.txt file 4 + 2. Create the directory to store it 5 + ```bash 6 + sudo mkdir -p /etc/age 7 + ``` 8 + 9 + 3. Move the file there 10 + ```bash 11 + sudo mv age-key.txt /etc/age/keys.txt 12 + ``` 13 + 14 + 4. Set file permissions 15 + ```bash 16 + sudo chmod 600 /etc/age/keys.txt 17 + ``` 18 + 19 + 5. Set system owner 20 + ```bash 21 + if [ "$(uname)" = "Darwin" ]; then 22 + sudo chown root:wheel /etc/age/keys.txt 23 + else 24 + sudo chown root:root /etc/age/keys.txt 25 + fi 26 + ```
+1 -1
sops/shared.nix
··· 4 4 }; 5 5 in 6 6 { 7 - sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ]; 7 + sops.age.keyFile = "/etc/age/keys.txt"; 8 8 9 9 sops.secrets.smtp_password = fromShared; 10 10 sops.secrets.smb-credentials = fromShared;