rrvsh/pantheon
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(sops): add cargo registry token as secret

Browse source
This commit is contained in:
Mohammad Rafiq 2025-03-25 04:45:56 +08:00
parent c9b321991f
commit fa620983be
No known key found for this signature in database
5 changed files with 21 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

16
systems/modules/common.nix
View file

@ -28,10 +28,16 @@
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICbZfOYt6zydLyO4f9JAsxb1i6kHAjYzqa0SOqef6MKM rafiq@orpheus"
];
};
environment = {
sessionVariables = {
CWP_JIRA_ACCESS_KEY_FILE = config.sops.secrets.cwp_jira_access_key.path;
CWP_JIRA_LINK_FILE = config.sops.secrets.cwp_jira_link.path;
};
environment.sessionVariables.CWP_JIRA_ACCESS_KEY_FILE =
config.sops.secrets.cwp_jira_access_key.path;
environment.sessionVariables.CWP_JIRA_LINK_FILE = config.sops.secrets.cwp_jira_link.path;
systemPackages = with pkgs; [
git
];
};
security.sudo.wheelNeedsPassword = false;
@ -48,10 +54,6 @@
"@wheel"
];
environment.systemPackages = with pkgs; [
git
];
time.timeZone = "Asia/Singapore";
i18n.defaultLocale = "en_SG.UTF-8";

7
systems/modules/sops.nix
View file

@ -1,4 +1,4 @@
{ inputs, ... }:
{ inputs, config, ... }:
{
imports = [ inputs.sops-nix.nixosModules.sops ];
sops = {
@ -13,6 +13,11 @@
};
cwp_jira_access_key = { };
cwp_jira_link = { };
cargo_api_key = {
mode = "0440";
owner = config.users.users.rafiq.name;
group = config.users.users.rafiq.group;
};
};
};
}