rrvsh/pantheon
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(nixosModules/system): add cvt jira env vars

Browse source
This commit is contained in:
Mohammad Rafiq 2025-05-21 16:46:33 +08:00
parent 565d9b8948
commit d1c8502873
No known key found for this signature in database
2 changed files with 9 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
modules/nixos/system/secrets.nix
View file

@ -6,11 +6,15 @@
secrets = {
"keys/tailscale" = { };
"keys/gemini" = { };
"keys/cvt-jira" = { };
"misc/cvt-jira-link" = { };
"rafiq/hashedPassword".neededForUsers = true;
};
};
environment.shellInit = # sh
''
export GEMINI_API_KEY=$(sudo cat ${config.sops.secrets."keys/gemini".path})
export CVT_JIRA_KEY=$(sudo cat ${config.sops.secrets."keys/cvt-jira".path})
export CVT_JIRA_LINK=$(sudo cat ${config.sops.secrets."misc/cvt-jira-link".path})
'';
}

7
secrets/secrets.yaml
View file

@ -3,6 +3,9 @@ rafiq:
keys:
tailscale: ENC[AES256_GCM,data:sW64TZY/GtWD+8KOQDHYvnwzWiqOlsJ5782utaxVwUaiWa18hU+Ppd3gp/8f0R3rK6gskaPC22iuCuzvuA==,iv:TN2zWKgU6eXH3uaL7Ci2JKmo8Ql4DUSWS3Lxfnag7j4=,tag:s5of4wLdCp6b5VMGWLLxvw==,type:str]
gemini: ENC[AES256_GCM,data:t4XTzJLMbHBG7LNaWMwO0YyYHREYOp4Zn95Kwshunnpwq9ezVv+0,iv:ZHq1ytak7Qy5a/zHghwEIWRinDWAkk2Vxw4iu/Q/UPk=,tag:Wyk0FqLTOWelznWHg/anxg==,type:str]
cvt-jira: ENC[AES256_GCM,data:y9enN905hAxp9F6TPcnYdcnA7VQQjTsysltBn7k9CVtOYUDBX5UKCbO4VEE=,iv:Hy/RshBTSFqEVlHq/fi/UqNdbzBvMaBmXnSHAz0WplY=,tag:bBgB+HJdHRu4bg/f9vq9nw==,type:str]
misc:
cvt-jira-link: ENC[AES256_GCM,data:J3XpDV2yjO5DMd5JF2stCBWZntTxenHuj+kXGAOs8oI=,iv:1YqJ6NF24CtA+E8ZB0M/7//xihFggyMMj0k0voaVPa0=,tag:XTZqC4gAy5ld0nFyAqL/Ww==,type:str]
sops:
age:
- recipient: age12l33pas8eptwjc7ewux3d8snyzfzwz0tn9qg5kw8le79fswmjgjqdjgyy6
@ -14,7 +17,7 @@ sops:
WXFKbjNMWDF0LzNyekJJMGFva2diemcKQTc8ODuK6IWqRhulHiCF92aU+3p23riY
M94Nzh+VT6QTFOgb3J7bBJMLhRH/fkQb6L6ia2n9QrVXFyYYMJ0oBw==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2025-05-20T10:06:02Z"
mac: ENC[AES256_GCM,data:ROMviwbisATzHdO63fk9vXix+6p8j26zWJvxVugGj3sp1GOQVqx9VgzJhZ/NTRLmyOc2vRX9WJ0jUrPPPPZH7uzbo/eJduZHyw4AzaAZksYBCKNwKfcUun5EHkWNYoac07Iu7/vpr12UDVFPHHHXPEput9aj7pd9kkREvYkT6WA=,iv:oEPKHwIDaJ2Z6OKNHrOiTwQPlVzmo/L6aJY5R74EkGk=,tag:xGhP0kAU8b07FCieXoBrmQ==,type:str]
lastmodified: "2025-05-21T08:43:17Z"
mac: ENC[AES256_GCM,data:z2hCtyu3djs+4hTv4kcA68GXhoikwCoHFfBaV4fybkSgZlEVMtuOnWAsJIWYFN0w8j0b1z60NhvTP/irZ6KZZ49FNOMjijoL/MdExcxbvlziXYmI7+m6q5LJPqbHM9WEfSJ8ZLVdVj6HU42lr+Ory6iVR8FIn0JcNUrccjwD12g=,iv:CCC67cN14LiZZvLwzRQCmMvnDTRI0NcPy0xP0mQeZjA=,tag:Z8kZSnP0Un0wvoq5kK0Eog==,type:str]
unencrypted_suffix: _unencrypted
version: 3.10.2