randogoth/bucur
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Use GRUB BIOS boot + move sops age key out of repo

Browse source
This commit is contained in:
randogoth 2026-02-07 18:46:06 +02:00
parent 1862821f8f
commit b419320bfc
2 changed files with 10 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
hosts/bucur.nix
View file

@ -5,6 +5,11 @@
i18n.defaultLocale = "en_US.UTF-8"; i18n.defaultLocale = "en_US.UTF-8";
system.stateVersion = "25.11"; system.stateVersion = "25.11";
boot.loader.systemd-boot.enable = false;
boot.loader.grub.enable = true;
boot.loader.grub.device = "/dev/vda";
boot.loader.efi.canTouchEfiVariables = false;
virtualisation.vmVariant = { virtualisation.vmVariant = {
users.mutableUsers = false; users.mutableUsers = false;
users.users.tobias.password = "admin"; users.users.tobias.password = "admin";

7
modules/services/podman.nix
View file

@ -1,8 +1,11 @@
{ config, ... }: { config, ... }:
{ {
environment.etc."sops/age/keys.txt".source = ../../secrets/age/keys.txt;
sops.defaultSopsFile = ../../secrets/bucur.yaml; sops.defaultSopsFile = ../../secrets/bucur.yaml;
sops.age.keyFile = "/etc/sops/age/keys.txt"; sops.age.keyFile = "/var/lib/sops/age/keys.txt";
systemd.tmpfiles.rules = [
"d /var/lib/sops/age 0700 root root -"
];
sops.secrets.mtproto_secret = {}; sops.secrets.mtproto_secret = {};