Andromeda/conf
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

add server user password

Browse Source
This commit is contained in:
andromeda
2025-12-30 19:45:43 +01:00
parent 0468cf2621
commit 9e402fdfa3
3 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
machines/173-249-5-230/configuration.nix
View File

@@ -3,7 +3,7 @@
machine, machine,
... ...
}: { }: {
age.secrets.secret1.file = ../../secrets/secret1.age; age.secrets.secret2.file = ../../secrets/secret2.age;
boot.tmp.cleanOnBoot = true; boot.tmp.cleanOnBoot = true;
boot.loader.grub.devices = ["nodev"]; boot.loader.grub.devices = ["nodev"];
environment.persistence."/nix/persist" = { environment.persistence."/nix/persist" = {
@@ -71,7 +71,7 @@
users.users."mtgmonkey" = { users.users."mtgmonkey" = {
isNormalUser = true; isNormalUser = true;
description = "mtgmonkey"; description = "mtgmonkey";
passwordFile = builtins.toString config.age.secrets.secret1.path; hashedPasswordFile = builtins.toString config.age.secrets.secret2.path;
extraGroups = ["wheel"]; extraGroups = ["wheel"];
openssh.authorizedKeys.keys = machine.pub-keys.ssh; openssh.authorizedKeys.keys = machine.pub-keys.ssh;
}; };

7
secrets/secret2.age Normal file
View File

@@ -0,0 +1,7 @@
age-encryption.org/v1
-> ssh-ed25519 mT2fyg DSrFJv1cg7XUWGT8H60d+IdbQJKIGVc0FznYD3ScHxY
x75LtCRBWRH+Y541dDKE2vLk9kOZNxbFI68cDvaeJ4c
-> ssh-ed25519 UHxfvA 2jLPahOP6AKIn66RM4vUWAl4eUhNgZblKB2z/Wa6ghw
IPFBVfk+c1lO43jc58TmdUM9+pOBad8M7v5lxpNJLOE
--- Bv3SJdghwzga9GD5Fz1/62gelkFqjjgRxoiv4S7x1Nc
[<5B><>

1
secrets/secrets.nix
View File

@@ -4,4 +4,5 @@ let
in { in {
"secret0.age".publicKeys = [andromeda lenovo]; "secret0.age".publicKeys = [andromeda lenovo];
"secret1.age".publicKeys = [andromeda lenovo]; "secret1.age".publicKeys = [andromeda lenovo];
"secret2.age".publicKeys = [andromeda lenovo];
} }