enable plasma6 on shodan so it can be used as the desktop session
This commit is contained in:
parent
2d7e7bee3c
commit
40d928eb87
8 changed files with 346 additions and 321 deletions
|
|
@ -1,31 +1,36 @@
|
|||
{ lib, config, ...}:
|
||||
let cfg = config.sopsSetup; in {
|
||||
{
|
||||
lib,
|
||||
config,
|
||||
...
|
||||
}: let
|
||||
cfg = config.sopsSetup;
|
||||
in {
|
||||
options = {
|
||||
sopsSetup.enable = lib.mkEnableOption "Enable Module";
|
||||
global.desktop= lib.mkOption {
|
||||
type = lib.types.bool;
|
||||
default = false;
|
||||
description = "Whether or not to install shared desktop secrets.";
|
||||
};
|
||||
global.desktop = lib.mkOption {
|
||||
type = lib.types.bool;
|
||||
default = false;
|
||||
description = "Whether or not to install shared desktop secrets.";
|
||||
};
|
||||
};
|
||||
|
||||
config = lib.mkIf cfg.enable {
|
||||
sops = {
|
||||
age.keyFile = "/var/secrets/keys.txt";
|
||||
secrets."lillian-password".neededForUsers = true;
|
||||
age.keyFile = "/var/secrets/keys.txt";
|
||||
secrets."lillian-password".neededForUsers = true;
|
||||
|
||||
defaultSopsFile = ../hosts/${config.networking.hostName}/secrets/sops.yaml;
|
||||
defaultSopsFile = ../hosts/${config.networking.hostName}/secrets/sops.yaml;
|
||||
|
||||
secrets."wg-private-key".mode = "0440";
|
||||
secrets."wg-private-key".owner = config.users.users.root.name;
|
||||
secrets."wg-private-key".mode = "0440";
|
||||
secrets."wg-private-key".owner = config.users.users.root.name;
|
||||
|
||||
secrets."ssh-private-key" = {
|
||||
mode = "0600";
|
||||
owner = config.users.users.lillian.name;
|
||||
path = "/home/lillian/.ssh/id_ed25519";
|
||||
secrets."ssh-private-key" = {
|
||||
mode = "0600";
|
||||
owner = config.users.users.lillian.name;
|
||||
path = "/home/lillian/.ssh/id_ed25519";
|
||||
};
|
||||
};
|
||||
};
|
||||
secrets."nextcloud-password" = lib.mkIf (cfg.desktop == true) {
|
||||
secrets."nextcloud-password" = lib.mkIf (cfg.desktop == true) {
|
||||
mode = "0600";
|
||||
owner = config.users.users.lillian.name;
|
||||
path = "/home/lillian/.netrc";
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue