Used agenix to manage secrets, 4 services up, ssh

2025-08-08 17:00:47 -04:00
parent ac6c3688ef
commit 911f3589a2
20 changed files with 369 additions and 56 deletions
--- a/modules/nixos/services/systemd/default.nix
+++ b/modules/nixos/services/systemd/default.nix
@@ -0,0 +1,28 @@
+{ pkgs, lib, config, self, keys, paths, ... }: {
+  imports =
+    [
+      ./network.nix
+      ./passwordmanager.nix
+      ./versioncontrol.nix
+    ];
+
+  virtualisation.docker = {
+    enable = true;
+    daemon.settings = {
+      "dns" = [ "1.1.1.1" "8.8.8.8" ];
+    };
+  };
+
+  age = {
+    identityPaths = paths.identities;
+    secrets = {
+      containers_env = {
+        file = self + "/secrets/containers.env.age";
+        path = "/run/secrets/containers.env";
+        owner = "root";
+        group = "root";
+        mode = "0400";
+      };
+    };
+  };
+}