SebastianStork/nixos-config
1
0
Fork 0
mirror of https://github.com/SebastianStork/nixos-config.git synced 2026-01-21 15:11:34 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

syncthing: set cert/key with sops

Browse source
This commit is contained in:
SebastianStork 2025-07-20 17:25:18 +02:00
parent 2da2cd592e
commit 8a0238af60
4 changed files with 29 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

8
hosts/alto/secrets.json
View file

@ -16,6 +16,10 @@
"password": "ENC[AES256_GCM,data:NVeqrWqtdgbhu3U7dAgwFeNLS9oPtnAPSrkGtvYD,iv:3l+9+bZfOpZdSCBKzXn5PqJvqo7mz/rj1tkihJqMHIs=,tag:JXigRR1adGlm8ehRv5wzIA==,type:str]" "password": "ENC[AES256_GCM,data:NVeqrWqtdgbhu3U7dAgwFeNLS9oPtnAPSrkGtvYD,iv:3l+9+bZfOpZdSCBKzXn5PqJvqo7mz/rj1tkihJqMHIs=,tag:JXigRR1adGlm8ehRv5wzIA==,type:str]"
}, },
"healthchecks-ping-key": "ENC[AES256_GCM,data:Cbk04CrYd9WcHnVRUed9aIImHbULhA==,iv:70cOOk5LfYciBx5baftFiBuquXY2welnjhoYmIB1iAQ=,tag:I5hqoai/HLdqUqonK77ubA==,type:str]", "healthchecks-ping-key": "ENC[AES256_GCM,data:Cbk04CrYd9WcHnVRUed9aIImHbULhA==,iv:70cOOk5LfYciBx5baftFiBuquXY2welnjhoYmIB1iAQ=,tag:I5hqoai/HLdqUqonK77ubA==,type:str]",
"syncthing": {
"cert": "ENC[AES256_GCM,data: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,iv:bJfo1JZ8muYmxoZfCx3x40DOrnstSChjUnzF+ZJjc2s=,tag:/Na5Vn9jxuHUCNsMDdT+yw==,type:str]",
"key": "ENC[AES256_GCM,data:vXMeQOsLT0D5oGkJ06cihrUpWvApZkBHJeR4NBF7bls7/b9dxuxyOBjPQQqHKHB0Hh6jFuDP+DTRI0Xrhwr6592CgBdzSxoV35GJBCXtaF/z539RlT0S06UECk71OCauQ7FNVZPgnkjjZ7VzdQLsgZZDAqtzT5bzmExZwI3hcj41VHz7pzRnv8ctax3qKpkf2A61Q3C2OC6l6I+n5/aOm0pTjKskNCO3mGUqX8UWw0ocP40roNTkABnyMZTXx38F1Nvy7NFA5FaLMhCZItQLYjYIKxd8ep6GxjKcq8etvTWvJi0hE6d5cfs0Of9IKR9ESuPd5seRN9HCSWSZo2LqdMXjeu+KQPTarz4FNRf2cY7nv8R9ZWHRjbzNMTZZ7c5j,iv:IXlcy7FmBJHf6fP0B/HhkcGZxKUu3VivhFm8u3jYxkc=,tag:JUFwZn3zIXcax3IDHChOvw==,type:str]"
},
"sops": { "sops": {
"age": [ "age": [
{ {
@ -27,8 +31,8 @@
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBac0VBTXZVdmpjc29oMkJT\nVXhoZnJaWkFjVEVtelphMzlBM1BaNjM3VjBNCjV3U2JwUnRjeEhWWVlMbmZHcjJP\nT1VNUDlNUTM1UjlVdkNGN1BrWHNpVTQKLS0tIDkyWGZVTWFIQzJrVDQ2U0ErQXRm\ndEhnSkQ5SDlnbmhGSVdYaDNuc3ZkM00K7WPEZRYWAd7uGY0IcDwGgQVPrpkF/tnz\nncj03JXM4BXwvEQOmD/i6wS4U4WCwkh9EauGJljVFTeu6TciomDULQ==\n-----END AGE ENCRYPTED FILE-----\n" "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBac0VBTXZVdmpjc29oMkJT\nVXhoZnJaWkFjVEVtelphMzlBM1BaNjM3VjBNCjV3U2JwUnRjeEhWWVlMbmZHcjJP\nT1VNUDlNUTM1UjlVdkNGN1BrWHNpVTQKLS0tIDkyWGZVTWFIQzJrVDQ2U0ErQXRm\ndEhnSkQ5SDlnbmhGSVdYaDNuc3ZkM00K7WPEZRYWAd7uGY0IcDwGgQVPrpkF/tnz\nncj03JXM4BXwvEQOmD/i6wS4U4WCwkh9EauGJljVFTeu6TciomDULQ==\n-----END AGE ENCRYPTED FILE-----\n"
} }
], ],
"lastmodified": "2025-06-30T21:08:41Z", "lastmodified": "2025-07-20T12:56:16Z",
"mac": "ENC[AES256_GCM,data:MK8jssDOXQlS34h1MwsCT5KR+aR72NsKn1xexzbhzwHR0+73ykLSDIjIjvGL1lePDX0Y0f7Em1oDcwnJpoMQWxHqjc2B8t0YbIZtktP9uD2SqIhYr3RvGIX1m4B8HSUEG1usAWFK8BblGZIjngWT1nlWDHakhE17rGc4WgKeHHM=,iv:p/UfEqLF8gVXyMc9VMfXY0O0v4Ed6976WIO78w/LSIE=,tag:q69Hm7hdT8OIh0eEQzEn8w==,type:str]", "mac": "ENC[AES256_GCM,data:Y3DLDLiSnNpgQnEMoHadbTKR3HfX6foWS5u7/g0WdNnsCupMcPz8+oXkcMbSBXxQsl5aMiMV3o0Rlsdn5jpUFhp9A8sBgzTyB8bIU4+VI1ONjg4UUkgq2amC0QE+QgkEHTCWhafMOtD8MKh9BJsky7fVrQ5mNdwt+JEBonMZgrY=,iv:dRaF+spRvHmnA4l9LrX/XqTprqZP41demvhiS1n2k4w=,tag:bE4Jd6Vx/8whsWrRUQbmnQ==,type:str]",
"unencrypted_suffix": "_unencrypted", "unencrypted_suffix": "_unencrypted",
"version": "3.10.2" "version": "3.10.2"
} }

8
hosts/fern/secrets.json
View file

@ -8,6 +8,10 @@
"DSL_EXT.psk": "ENC[AES256_GCM,data:S4vKzCgcs4PrSw7ZKoqWQprTHDZUmJCruZegcu9hJlnkEFUnnaKCBkAC/w==,iv:5WNg69StrMKqiJdJ4l8AdyvZr/fu1jN8ZN+W+k7VZvY=,tag:oPO3d9pGDLukGA1ZtXSbuw==,type:str]", "DSL_EXT.psk": "ENC[AES256_GCM,data:S4vKzCgcs4PrSw7ZKoqWQprTHDZUmJCruZegcu9hJlnkEFUnnaKCBkAC/w==,iv:5WNg69StrMKqiJdJ4l8AdyvZr/fu1jN8ZN+W+k7VZvY=,tag:oPO3d9pGDLukGA1ZtXSbuw==,type:str]",
"eduroam.8021x": "ENC[AES256_GCM,data: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,iv:NfCbkM/zswvdlQ2FhC1/iJMuysPGPE0GG9f2gmonz+k=,tag:7iq3a0I7krGbPWjvGQRa+w==,type:str]" "eduroam.8021x": "ENC[AES256_GCM,data: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,iv:NfCbkM/zswvdlQ2FhC1/iJMuysPGPE0GG9f2gmonz+k=,tag:7iq3a0I7krGbPWjvGQRa+w==,type:str]"
}, },
"syncthing": {
"cert": "ENC[AES256_GCM,data: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,iv:W82k3U5tBcGfuSsrY/4RpQmpbw2jYn8NuXKRluB3fyg=,tag:s6SY8mWpRELaGVAUzfZgdg==,type:str]",
"key": "ENC[AES256_GCM,data:gaSFym2EK/LM+LrRfYzBwJ8v5pk1lpZvve1a//5a+MbC19kmE21QE8AGcrYLEBmYcVlWuF4yo4bA5uWT+FZCyaU3s3wU8JFMsJnJkluBinGmP9g26G8D5fNvfJLV+SGIRnufCPIz06zwEOJMavxEae3KBdiGxOJmuvtn+ybuu7aEmhAk06X3Bhebz4zRxhtlp+3C/TDs4afVjMlbybog8E4nGnl6P3FjimLL33oVxp9S0sBLx1IiEQTCEjkXX2jW0vGQbc6XOApT15V69/HQRZVTD1lsE/O80ETwghU9gM/NkgCQ9qlDeyIl7yUOnweQBFqMQWK/qrgec8ZDAZVI3rGM3t9ArynPZIcyE5WoV/SKIunY81/qS/Xw7EGFrumd,iv:4GFnhwE+Bp6JmqV6w3s7kd9usNh5eFAKqGR6vk5SSVA=,tag:64dUsUvOJ36scfdD9c2m/w==,type:str]"
},
"sops": { "sops": {
"age": [ "age": [
{ {
@ -19,8 +23,8 @@
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyTVpkazRqVHdNZVNjZ0VZ\nUjk0OXZnZDlpVW14WkFxdUdNaC9mSnE5MERzCkxXKzYzSzVXWFBXV1loV0FlUHZy\nY1VaZnI3MmNpUnk4aWdlOWs3MVVlU2MKLS0tIEhucHd4MlVpMGo3a1pQSW1LMlBW\nNGxZaktVa2V1ZU5JNG5HbWlDaVhnMXcKBHy42a77B2OoXBRJdwdK4D8TQ72aJzey\nI9uP7+UdbLIabIlpoe2RUd4f9vbfXHzZTD26b0WFQT9kkdKG8jWrzw==\n-----END AGE ENCRYPTED FILE-----\n" "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyTVpkazRqVHdNZVNjZ0VZ\nUjk0OXZnZDlpVW14WkFxdUdNaC9mSnE5MERzCkxXKzYzSzVXWFBXV1loV0FlUHZy\nY1VaZnI3MmNpUnk4aWdlOWs3MVVlU2MKLS0tIEhucHd4MlVpMGo3a1pQSW1LMlBW\nNGxZaktVa2V1ZU5JNG5HbWlDaVhnMXcKBHy42a77B2OoXBRJdwdK4D8TQ72aJzey\nI9uP7+UdbLIabIlpoe2RUd4f9vbfXHzZTD26b0WFQT9kkdKG8jWrzw==\n-----END AGE ENCRYPTED FILE-----\n"
} }
], ],
"lastmodified": "2025-05-29T17:57:23Z", "lastmodified": "2025-07-20T15:04:54Z",
"mac": "ENC[AES256_GCM,data:cm7QNzLyDxxGCkjVlBcwYutN4A3NTEaSH/3aVPcOvrsPcUtUzBpIyIsnR7GWErrRICX2nu765Nkt8uQd1RdtMiHvm4F1jB3j7gED2uRKwU0bS+kBnx+tmQx1HCdB4CtHsFW+H3sxJ61Y+06oESZsJrvh5kq9URKfSPb6DHIB/s8=,iv:kB5kCES7TcZ9q/LiyhFzNYMVYa9M8ZwvOv3QnONYMyo=,tag:DTJ25N447vadXb8XekQarw==,type:str]", "mac": "ENC[AES256_GCM,data:rbFfTg9DuL7XeQdbyFMr5DD3dTMZkx5vShO9R30CtQVe8HvAoAZwVOEx93mFFBu99KAulMVyqlxyaLgj4BfeDpAcG6iVcpgCwLK6cTWgpHTSajXUB1Bsd7LLXorfIq21tv+eLfo0wO++Gx4mA9H0zYvw/9NJ/pqYsFSxQTkpGAc=,iv:myZX5afSN/Y1RoKu694Oi403yiPdN6aBIkjXWtY+lvc=,tag:tw3bYaPhK9qIKSMneiQVQA==,type:str]",
"unencrypted_suffix": "_unencrypted", "unencrypted_suffix": "_unencrypted",
"version": "3.10.2" "version": "3.10.2"
} }

15
hosts/north/secrets.json
View file

@ -1,11 +1,11 @@
{ {
"seb-password": "ENC[AES256_GCM,data:dlItcb6M0ZBmfbFz9k1QBces/hZ4bBaRQ8zCPinvXOZSNHDE4SIQfSDQSttP1LjccuQXj5U864zJz9XuFybvQn5X4Z80VEGXZw==,iv:vORmRgBgZvdafRa8vFF4LL3fw44yZV3yNq3L8eOcQRI=,tag:Jj2QBMGZzvPx6x3NriHYvQ==,type:str]", "seb-password": "ENC[AES256_GCM,data:dlItcb6M0ZBmfbFz9k1QBces/hZ4bBaRQ8zCPinvXOZSNHDE4SIQfSDQSttP1LjccuQXj5U864zJz9XuFybvQn5X4Z80VEGXZw==,iv:vORmRgBgZvdafRa8vFF4LL3fw44yZV3yNq3L8eOcQRI=,tag:Jj2QBMGZzvPx6x3NriHYvQ==,type:str]",
"tailscale-auth-key": "ENC[AES256_GCM,data:FkAOpUBaAmOK4f3yUHbRKoFukXIu/a/QBnM/18khO7xYeohWt9r3mMlF6+4kxbiG7ixlgYrPSfZZpHycsA==,iv:5s0VDYe3gXc5S3P4MUP1xoKUm6+06BqSjoxzQrmGvv0=,tag:bJPZhzLoMIhkWrW24rMwLA==,type:str]", "tailscale-auth-key": "ENC[AES256_GCM,data:FkAOpUBaAmOK4f3yUHbRKoFukXIu/a/QBnM/18khO7xYeohWt9r3mMlF6+4kxbiG7ixlgYrPSfZZpHycsA==,iv:5s0VDYe3gXc5S3P4MUP1xoKUm6+06BqSjoxzQrmGvv0=,tag:bJPZhzLoMIhkWrW24rMwLA==,type:str]",
"syncthing": {
"cert": "ENC[AES256_GCM,data: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,iv:72+0+hlBxKtuhjhrLD1EMlx8LcJtskxO+MCpYj7rpes=,tag:ZClFYFa9pCedk8wP9LF0Kg==,type:str]",
"key": "ENC[AES256_GCM,data:1KiNYgkaFQvttJPOM2B9OrYbSwcmSWxHYJ/0qyAqYz5J17WvqP74BIY4t+w7PMrvSUHrmo2ml+EeuFax7CKuiVBsZUBXdnUnrnOPvdFuls0WC15oxXz+ZbHtlfkut2WaiDLDF+6fRR3Pd/VY8uDD4+IvD+jXddkCiGQsME8Wh9NQNQTS9KiW6upNpXuOS6ipX1VZKQ37o7z+7w+lgVLPaPlS/vWww1CARjYddiOMNG8YvAmhaBYjdBLTTrNOW6T2iDDHNh+Hj8V8ISYDY5U6f7J+tXRbsow/0xKdPTGoPLek0k8zqpGJjfo+c3DrAZnMLn+dVHCZVJlsTWcPaiiBC1/ZQzD5cavzGMjXY3kuyP3XV3m7L+bHn9SEfHhQZ1PB,iv:lkGS4uR0Xd7FnahXLjVc8g0PiRPxyUS6YQY3EM3B5G0=,tag:bXgBUFiQomMWgXsN1d6J5g==,type:str]"
},
"sops": { "sops": {
"kms": [],
"gcp_kms": [],
"azure_kv": [],
"hc_vault": [],
"age": [ "age": [
{ {
"recipient": "age1mpq8m4p7dnxh5ze3fh7etd2k6sp85zdnmp9te3e9chcw4pw07pcq960zh5", "recipient": "age1mpq8m4p7dnxh5ze3fh7etd2k6sp85zdnmp9te3e9chcw4pw07pcq960zh5",
@ -16,10 +16,9 @@
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvK2dObkIyWC9JRWphaWVm\ndHlnMjlic0IrV2dqNEFPY2xDemxrRXZVc1Q0CllYVVRTaWR5YmRBc1JYK05ISFYz\nYkVFT2NQTXJDaXREQ3B3blA2QXY2dHMKLS0tIDRBVVViREh2WVdUUGFVVitFTWJV\nbzF0cEFGM2M2UDBNd1pVVGhuMTYyMGcKubGAn3lr58t3Hfi2t3FPbDWH/b5rp4Qo\no+M+QW/cOyR5zITSDNhcJobt+iabeIM1aHWFo8Am8XzUWRch7NROMg==\n-----END AGE ENCRYPTED FILE-----\n" "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvK2dObkIyWC9JRWphaWVm\ndHlnMjlic0IrV2dqNEFPY2xDemxrRXZVc1Q0CllYVVRTaWR5YmRBc1JYK05ISFYz\nYkVFT2NQTXJDaXREQ3B3blA2QXY2dHMKLS0tIDRBVVViREh2WVdUUGFVVitFTWJV\nbzF0cEFGM2M2UDBNd1pVVGhuMTYyMGcKubGAn3lr58t3Hfi2t3FPbDWH/b5rp4Qo\no+M+QW/cOyR5zITSDNhcJobt+iabeIM1aHWFo8Am8XzUWRch7NROMg==\n-----END AGE ENCRYPTED FILE-----\n"
} }
], ],
"lastmodified": "2025-03-24T20:53:16Z", "lastmodified": "2025-07-20T12:54:07Z",
"mac": "ENC[AES256_GCM,data:vbWTMMFRQbSoXzkrCh4cx7i0FtSfpDAaEt2swFedXX11gIYtxGvp/Rh220k8HPjC0GGpnLOSKuCKUpaFTSMzy81LvyGqdyFH5nBK+ksINlRGbZd7NZsmQRIYiPXkyQkJ1tQbyUnyxTxxQjTJ6Kn+bl7IXwOyZGzTSTSje9Oj1ks=,iv:QmbzlEUJ/iNqwQG7YiF3plGB0vqhLD0B2G0VOtdc0rs=,tag:ldaCRpji0nxyxefVzS7/ZQ==,type:str]", "mac": "ENC[AES256_GCM,data:FAtOoCTkT8xK6D4l9hekMhAincaNr29+qvOWwI2Do3YFsvfTmHf7nlYIyxwk0tC76XqOqRwRC6qx+Kwoy6NnbdgVlgM+8DHOIuuju0Tp487GEWprwhKbW9px9ZRp/+1i9vap14mRRskhxI01ruSDwOUqnelxQ5WosYB0tHlZ73o=,iv:43Gcc2wDyPoib5MsQJHg9K4ooG549vZv4RVdYSan8eU=,tag:pUn0vISQfgZk6lh/lJkwcQ==,type:str]",
"pgp": [],
"unencrypted_suffix": "_unencrypted", "unencrypted_suffix": "_unencrypted",
"version": "3.9.4" "version": "3.10.2"
} }
} }

10
modules/system/services/syncthing.nix
View file

@ -7,6 +7,8 @@
let let
cfg = config.custom.services.syncthing; cfg = config.custom.services.syncthing;
tailscaleCfg = config.custom.services.tailscale; tailscaleCfg = config.custom.services.tailscale;
useStaticTls = config.custom.sops.secrets |> lib.hasAttr "syncthing";
in in
{ {
options.custom.services.syncthing = { options.custom.services.syncthing = {
@ -53,6 +55,11 @@ in
]; ];
}; };
sops.secrets = lib.mkIf useStaticTls {
"syncthing/cert".owner = config.services.syncthing.user;
"syncthing/key".owner = config.services.syncthing.user;
};
services.syncthing = { services.syncthing = {
enable = true; enable = true;
@ -62,6 +69,9 @@ in
guiAddress = lib.mkIf cfg.isServer "127.0.0.1:${toString cfg.gui.port}"; guiAddress = lib.mkIf cfg.isServer "127.0.0.1:${toString cfg.gui.port}";
cert = lib.mkIf useStaticTls config.sops.secrets."syncthing/cert".path;
key = lib.mkIf useStaticTls config.sops.secrets."syncthing/key".path;
settings = { settings = {
# Get the devices and their ids from the configs of the other hosts # Get the devices and their ids from the configs of the other hosts
devices = devices =