rrvsh/pantheon
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(sops): add cwp jira secret and url to sops as environment variables for rafiq

Browse source
This commit is contained in:
Mohammad Rafiq 2025-03-20 20:36:35 +08:00
parent 076f81007c
commit c952e6df1e
No known key found for this signature in database
3 changed files with 27 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

22
systems/modules/common.nix
View file

@ -2,7 +2,8 @@
pkgs,
config,
...
}: {
}:
{
imports = [
./networking.nix
./shell.nix
@ -15,21 +16,34 @@
isNormalUser = true;
description = "rafiq";
hashedPasswordFile = config.sops.secrets.hashed_password_rafiq.path;
extraGroups = ["networkmanager" "wheel"];
extraGroups = [
"networkmanager"
"wheel"
];
openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILv8HqazE294YdyGaXK6q2EniDlTpGaUL071kk9+W0GJ rafiq@nemesis"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICbZfOYt6zydLyO4f9JAsxb1i6kHAjYzqa0SOqef6MKM rafiq@orpheus"
];
};
environment.sessionVariables.CWP_JIRA_ACCESS_KEY_FILE =
config.sops.secrets.cwp_jira_access_key.path;
environment.sessionVariables.CWP_JIRA_LINK_FILE = config.sops.secrets.cwp_jira_link.path;
security.sudo.wheelNeedsPassword = false;
# Enable basic fonts for reasonable Unicode coverage
fonts.enableDefaultPackages = true;
nixpkgs.config.allowUnfree = true;
nix.settings.experimental-features = ["nix-command" "flakes"];
nix.settings.trusted-users = ["root" "@wheel"];
nix.settings.experimental-features = [
"nix-command"
"flakes"
];
nix.settings.trusted-users = [
"root"
"@wheel"
];
environment.systemPackages = with pkgs; [
git