SebastianStork/nixos-config
1
0
Fork 0
mirror of https://github.com/SebastianStork/nixos-config.git synced 2026-01-21 14:01:34 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Rename the sops user password attribute

Browse source
This commit is contained in:
SebastianStork 2024-04-03 00:47:58 +02:00
parent 309858b2f2
commit df184ded64
3 changed files with 8 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

7
hosts/seb-desktop/secrets.yaml
View file

@ -1,5 +1,4 @@
password:
seb: ENC[AES256_GCM,data:7mfTHRoomM43w+d5qWtHF3KJZWEC0HFGXvnotzkhS2qmo6PQVYLLraJ9bekK56wWX/z9sxv056oIP5OKCWSC0FFBVzisBFsQug==,iv:gVs69D65ho9+UBxcMy6wGMHTdhBPzD6khQfQgMkaqh8=,tag:u8U/4B42jYDwxz9CuGC9tw==,type:str]
seb-password: ENC[AES256_GCM,data:vZml/awD9ieBCQQwYs9zZveqjDDzMxFH1PFKQ8qLlaiUgaWL2BmKf4RbuS/pkjNLHr/UkPM3d3rlW6WAlNvhZiMRE+naGwD1Mw==,iv:vORmRgBgZvdafRa8vFF4LL3fw44yZV3yNq3L8eOcQRI=,tag:B7jX2LV/vKpzFlvG0bnCVA==,type:str]
vpn:
lgs:
crt: ENC[AES256_GCM,data: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,iv:3ZJ9yT9swwsmuGlm9jY/4To38UUO7K8JTMUsGZxX4GM=,tag:6dlVVdMqgEhWOhBUizjgKg==,type:str]
@ -19,8 +18,8 @@ sops:
SzVZMDNXNzhkMUdsYVgzRDMydGR4VTQKK3YYdk3tHd1U4rvyVgQ95+s4Le7E8NDe
5KD0bWmg7CcehhRWQfBDzBsg63QcyIcq728PptprwGqik7WZEg0b9w==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2024-03-22T21:02:27Z"
mac: ENC[AES256_GCM,data:9ITwNgbTUzL/ozXupuF+cSNB6BjmfYYzw4oNq5z6Z47Duu5SFpA50TLGKxeXX3YSOsyRf92rspO0OwmaqZcZx27aOAHm892jG/8xpaw1lt+t5ojaDaNr8CDGFjozjEayNEtprMiPTufAElQtkg2slDRJOYZ+iL4hNrxS1MBjHVA=,iv:CAZV7Rw4ovDuvtOS+n5+wFRi7SZU41CLFput+eSOmqQ=,tag:qy6zwmLtCc+CTAymWvM7dw==,type:str]
lastmodified: "2024-04-02T22:17:31Z"
mac: ENC[AES256_GCM,data:8n1uxIbuCp9z5XML68jq65V3FGj6AVPq6y5BZhS5FGVc7fCSxQrxil+SYIWDDrMn5rp7DHM/t4hJf2TA4T3U7xwS1i63mPiIrwPl9+CiHPK/wMkm67c0Xh+RnRrXhCbl5wO08vZkp2D9pso7wV/52OOtMKax+O3K9wweZWNSef0=,iv:rbtXcGI1JQvBfTq4PJJTXmRz3IOiPyBDDTGtIICNFQY=,tag:7QQknmXBHKEcrco0So+ATg==,type:str]
pgp: []
unencrypted_suffix: _unencrypted
version: 3.8.1

7
hosts/seb-laptop/secrets.yaml
View file

@ -1,5 +1,4 @@
password:
seb: ENC[AES256_GCM,data:tD5uKTwRbIR/h9zr6LC0t4k9MFQwJ33Ie4WeWuS8iYAdwz/oM5uYNitg7UVZShqoCD9hHRcz6oUIY/0cs/y0idx9p8ANpSvJRg==,iv:v+3/3KiZnauiyW/dx1S0125Dq5+nbw/0g8CcQ89WPOs=,tag:mqpTaTqKv6c3Eofr3ZfjoQ==,type:str]
seb-password: ENC[AES256_GCM,data:LlW1njlY0tVfYne/NFM2KJbAPb4eAQgy0mPMIZAIPH5mdr7cSCaPYhc+WF5ZlrlL//mh8WHhsHbEBuA6P7oabSeP6ZczCmTV6w==,iv:oWQj47oxjxR3DBHhFwUD/Emj5ziZHwcbXzD69ChRmHU=,tag:cuTloyd4HW6behF8fmWdxw==,type:str]
wlan.env: ENC[AES256_GCM,data:rHT226tpqdze1P875A9E8yiXe27RztJld9hY4Zzxo+6Ik1DrXA1x7LAr/Hfbp9hr6GPuvtBKBR+pAg+AcoB5qN21FZ6LP6lvsAbjOrGRfUlphl6oEa4xBpWdN8vVeNUEGbCxB0M+7XK65fHE5UDP4FdeJpC5XH1k2ZKqYA7o/CENBA1+uxoI8cAEMlGhu04hJkY9VBhC3zcOtszcUKAxJASDicLKJ18+,iv:u5Wud1pDuvYlTu0Ls50eDtkc7rpnWz3dPo68fxJq/Qk=,tag:GpONClKtiDGmM9O0BlcSdg==,type:str]
vpn:
lgs:
@ -20,8 +19,8 @@ sops:
N2dzR01qQnVxb3UvdUZLZ05jcDdjUGMKjx1BGh8c+OqXwUKeceUMUjuZgo04H0oy
t3HZbqg62Bj+Ucun+lt9sOA1uHHSQsn91i8WTxdrOyiX7WpfiASE1w==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2024-03-05T14:47:55Z"
mac: ENC[AES256_GCM,data:BSZKxzFil5+rX5rMn/Sm6TEtQN+5CBasTHVwnIVBq91e4XY6VaC1Awhecr6Jez6Ssw35x1p7r/j1xs9MqaZQFzRu/dIQotsKIcLbWX/BAMEMVguvwNRMPH6cDjfG5l7Ptu02SXVKGZ2DCT2lsS9yM77zK3iC3vf7ggJ6g4JepAA=,iv:nBaGH5QBCw9fh1ffDp3/wDTz3znhUZ9DH5T52LqBOeA=,tag:vhlqdnqu/2XuZ+Fucl8nGQ==,type:str]
lastmodified: "2024-04-02T22:20:53Z"
mac: ENC[AES256_GCM,data:WRmSFRw2zxG6SoC8Q8hrTpXhFerBPXSVk10t6OIzPqMQTyzfRdR/c9SYfN57ogfKTxnKRXKTxJt4xg/SQn7t09EVMLSQfS+cXLvv1o/kaf3JVXl3EXjPR1PsL1MuWG+PPyLZ8vSIjLbUOYtgL+RPSOnd1uoFFZSZeIPCX0B+W2E=,iv:nJIp2hmcoIScVyw9QMDNbh7/CqOZgHDlHgj2KLhVHTI=,tag:b75HnLD+3aEoieaqJ/Dvlg==,type:str]
pgp: []
unencrypted_suffix: _unencrypted
version: 3.8.1

4
users/seb/default.nix
View file

@ -1,12 +1,12 @@
{config, ...}: {
imports = [../common.nix];
sops.secrets."password/seb".neededForUsers = true;
sops.secrets.seb-password.neededForUsers = true;
users.users.seb = {
isNormalUser = true;
description = "Sebastian Stork";
hashedPasswordFile = config.sops.secrets."password/seb".path;
hashedPasswordFile = config.sops.secrets.seb-password.path;
extraGroups = ["wheel" "networkmanager" "libvirtd" "video"];
};