diff --git a/systems/jibril/default.nix b/systems/jibril/default.nix index 5a72991..f085bf3 100644 --- a/systems/jibril/default.nix +++ b/systems/jibril/default.nix @@ -8,10 +8,23 @@ nixpkgs.config.allowUnfree = true; system.stateVersion = "23.05"; + sops-nix = { + enable = true; + keyFile = "/etc/sops/age/keys.txt"; + sopsFile = ./secrets.yaml; + secrets = { + wireless = {}; + }; + }; + pipewire.enable = true; polkit.enable = true; bluetooth.enable = true; - wireless.enable = true; + wireless = { + enable = true; + networks = builtins.fromTOML (builtins.readFile ./networks.toml); + secretsFile = config.sops.secrets.wireless.path; + }; user.name = "pan"; user.timezone = "America/Los_Angeles"; @@ -20,6 +33,7 @@ hyprland.enable = true; librewolf.enable = true; - xonsh.enable = true; + fish.enable = true; + fish.setDefault = true; syncthing.enable = true; } diff --git a/systems/jibril/networks.toml b/systems/jibril/networks.toml new file mode 100644 index 0000000..860bdd1 --- /dev/null +++ b/systems/jibril/networks.toml @@ -0,0 +1,8 @@ +["TheKabal2.4"] + +["DropboxGuest3.0"] + +[foofoo2] + +[Homura] +priority = 0 diff --git a/systems/jibril/secrets.yaml b/systems/jibril/secrets.yaml new file mode 100644 index 0000000..fcde584 --- /dev/null +++ b/systems/jibril/secrets.yaml @@ -0,0 +1,30 @@ +wireless: ENC[AES256_GCM,data:pQv+gdAW8W9nSEJkbXWex47iuuqgJMEELldFsmgk2Y08MDZ1ytXqlphTK/jbewD3tpz4v29fSuWamv1uZpxM2+c2zCuMVTdrhAf0i/Sjqd9CWP8NQvTDI3v8ps9REFzR7n7hywnkfOkDNwRkmavSfCxK5k9SQLNC7De6P811/Fundb9r6oeIH2OEDBkZEHw8gYndjy6cLDUE2SY/cmxRsKWhATsCLcWKOpQa86zlT9dr9nMtYVF1AN5T4JR/7QKqJ8UT4mvhAA0OEfKv0Cf3euH24vtBrv5YxwDT6tQpOABOyOy9mWLc+bXDID/HX4akeU1O6+eBSpNeRgpAcMfD6b/eqKAvDvnixHubu9GemVspmeoA/91i5B70u3kjm0EKup7KLXCp5RutLnLRczDPdfbCB7bEipeRyF8P+UCuhQ==,iv:WN7mGyHpaMDdLRpFGyDUQ2D9a0t/rucfyKroJYqaHPs=,tag:7KTzBEt30nqCJclDgiWuKg==,type:str] +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: + - recipient: age1ey3wr2wnkgny3dfgvnyrf0cptwzr7s5x464p2y9ya58lpay8lfrsds3y68 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuaHFJcnp0YkN5ZmRYWStz + OFlFKzFWV1pSaGdYQ2tlWkhvMFRYczQvdWtnCkwwYk84bStIeUNOWUhhSktUSWYz + V3FUNkdLUHFBVmwrb0J6QldjSlVDQmsKLS0tIGZrR2txN2grWS9RbmdRRzU3Ui83 + SWl2NjQzWWtFY3dBdlhobi9rY0k0U1kKZm40e+gjMmNsQ/RmaY4rdlEr6gSLrTud + 5FShEZkAkFOkl0FYdHLKPDrmBocrGRJP7gLPYgo1eT5w8LaGYlNmAA== + -----END AGE ENCRYPTED FILE----- + - recipient: age1n8936ux6ushjyz3kuumdrz63jcwsvz7qkfj66rrkgk8d78wl2dssgev4tm + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGVGJPYVVYd3RqbzkxNEg1 + Nm9DN2Y3OC9yUUZtcGN6bjJjWllOVGxINmxjClR4NUpZQVRFdWdObDYwd1NMOWpT + OHNsUXJ1NUJlOFhTYks5RDAxaHhVZ2MKLS0tIGFaV2JYcWVSMmdFWnlSZlBPTEJi + Ky83VFhiVE9wK01UMDlSbnIrd2d2SHcKp6mF8PaR0ItrvLHpEgMe6fwuboyrrs9y + 7Ct6qZ1SN/4f/xJpDP2qiaQ4KTZzY1BlC3isT3CWeajOQhL/y5JCOw== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2024-11-07T21:12:36Z" + mac: ENC[AES256_GCM,data:z0ePEvsEKvcMca2x2qjTsSBwk+qI3jd8h2uAnSsGtJL5UI1OdBL8oVIGKty0pGaCvtrF01UN1ncKBGe5y12Vij2yuyv7LK4ANArxQ4+O583NdYHYeD+T75yGu4SAYjcoM23RD1h+W0SLQpCen2J3WYmJaOjtqMBv/gaFYl/DV7I=,iv:VJjZTd1g4oJCDLEp8+jH15Y2svTNtQUE1vc3WQoJJZU=,tag:4U7uh6U5PwHJ2r6/WFUbnw==,type:str] + pgp: [] + unencrypted_suffix: _unencrypted + version: 3.9.1