Jibril, update secrets, wireless and shell

systems/jibril/default.nix

@@ -8,10 +8,23 @@
   nixpkgs.config.allowUnfree = true;
   system.stateVersion = "23.05";
 
+  sops-nix = {
+    enable = true;
+    keyFile = "/etc/sops/age/keys.txt";
+    sopsFile = ./secrets.yaml;
+    secrets = {
+      wireless = {};
+    };
+  };
+
   pipewire.enable = true;
   polkit.enable = true;
   bluetooth.enable = true;
-  wireless.enable = true;
+  wireless = {
+    enable = true;
+    networks = builtins.fromTOML (builtins.readFile ./networks.toml);
+    secretsFile = config.sops.secrets.wireless.path;
+  };
 
   user.name = "pan";
   user.timezone = "America/Los_Angeles";
@@ -20,6 +33,7 @@
   hyprland.enable = true;
 
   librewolf.enable = true;
-  xonsh.enable = true;
+  fish.enable = true;
+  fish.setDefault = true;
   syncthing.enable = true;
 }

systems/jibril/networks.toml

@@ -0,0 +1,8 @@
+["TheKabal2.4"]
+
+["DropboxGuest3.0"]
+
+[foofoo2]
+
+[Homura]
+priority = 0

systems/jibril/secrets.yaml

@@ -0,0 +1,30 @@
+wireless: ENC[AES256_GCM,data:pQv+gdAW8W9nSEJkbXWex47iuuqgJMEELldFsmgk2Y08MDZ1ytXqlphTK/jbewD3tpz4v29fSuWamv1uZpxM2+c2zCuMVTdrhAf0i/Sjqd9CWP8NQvTDI3v8ps9REFzR7n7hywnkfOkDNwRkmavSfCxK5k9SQLNC7De6P811/Fundb9r6oeIH2OEDBkZEHw8gYndjy6cLDUE2SY/cmxRsKWhATsCLcWKOpQa86zlT9dr9nMtYVF1AN5T4JR/7QKqJ8UT4mvhAA0OEfKv0Cf3euH24vtBrv5YxwDT6tQpOABOyOy9mWLc+bXDID/HX4akeU1O6+eBSpNeRgpAcMfD6b/eqKAvDvnixHubu9GemVspmeoA/91i5B70u3kjm0EKup7KLXCp5RutLnLRczDPdfbCB7bEipeRyF8P+UCuhQ==,iv:WN7mGyHpaMDdLRpFGyDUQ2D9a0t/rucfyKroJYqaHPs=,tag:7KTzBEt30nqCJclDgiWuKg==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1ey3wr2wnkgny3dfgvnyrf0cptwzr7s5x464p2y9ya58lpay8lfrsds3y68
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuaHFJcnp0YkN5ZmRYWStz
+            OFlFKzFWV1pSaGdYQ2tlWkhvMFRYczQvdWtnCkwwYk84bStIeUNOWUhhSktUSWYz
+            V3FUNkdLUHFBVmwrb0J6QldjSlVDQmsKLS0tIGZrR2txN2grWS9RbmdRRzU3Ui83
+            SWl2NjQzWWtFY3dBdlhobi9rY0k0U1kKZm40e+gjMmNsQ/RmaY4rdlEr6gSLrTud
+            5FShEZkAkFOkl0FYdHLKPDrmBocrGRJP7gLPYgo1eT5w8LaGYlNmAA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1n8936ux6ushjyz3kuumdrz63jcwsvz7qkfj66rrkgk8d78wl2dssgev4tm
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGVGJPYVVYd3RqbzkxNEg1
+            Nm9DN2Y3OC9yUUZtcGN6bjJjWllOVGxINmxjClR4NUpZQVRFdWdObDYwd1NMOWpT
+            OHNsUXJ1NUJlOFhTYks5RDAxaHhVZ2MKLS0tIGFaV2JYcWVSMmdFWnlSZlBPTEJi
+            Ky83VFhiVE9wK01UMDlSbnIrd2d2SHcKp6mF8PaR0ItrvLHpEgMe6fwuboyrrs9y
+            7Ct6qZ1SN/4f/xJpDP2qiaQ4KTZzY1BlC3isT3CWeajOQhL/y5JCOw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-11-07T21:12:36Z"
+    mac: ENC[AES256_GCM,data:z0ePEvsEKvcMca2x2qjTsSBwk+qI3jd8h2uAnSsGtJL5UI1OdBL8oVIGKty0pGaCvtrF01UN1ncKBGe5y12Vij2yuyv7LK4ANArxQ4+O583NdYHYeD+T75yGu4SAYjcoM23RD1h+W0SLQpCen2J3WYmJaOjtqMBv/gaFYl/DV7I=,iv:VJjZTd1g4oJCDLEp8+jH15Y2svTNtQUE1vc3WQoJJZU=,tag:4U7uh6U5PwHJ2r6/WFUbnw==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.1