From d63beab0b0fe860a9b954a19e0cd6f2c22fdb04a Mon Sep 17 00:00:00 2001 From: Shahab Dogar Date: Tue, 4 Feb 2025 10:35:37 +0500 Subject: [PATCH] fix: NixOS | update sops configs --- flake.lock | 48 ++++++++++++++++++++--------------------- nixos/configuration.nix | 7 +++--- 2 files changed, 28 insertions(+), 27 deletions(-) diff --git a/flake.lock b/flake.lock index 7b9a539..b929dae 100644 --- a/flake.lock +++ b/flake.lock @@ -20,11 +20,11 @@ ] }, "locked": { - "lastModified": 1738183445, - "narHash": "sha256-C1He3N1SA8D2u+TSlldbA9wiYwDvXI4GxX3zKaeD7qU=", + "lastModified": 1738456976, + "narHash": "sha256-cufyHbOMnSt9V4w4OVSzNcpJ+8DwzRZRJaca2Q89KVI=", "owner": "hyprwm", "repo": "aquamarine", - "rev": "48a000cf35dd10bfeb231152735aebbe875f4b74", + "rev": "257b2050790ab3b1eb389e0f8bdc400eb9510139", "type": "github" }, "original": { @@ -172,11 +172,11 @@ ] }, "locked": { - "lastModified": 1738448366, - "narHash": "sha256-4ATtQqBlgsGqkHTemta0ydY6f7JBRXz4Hf574NHQpkg=", + "lastModified": 1738610386, + "narHash": "sha256-yb6a5efA1e8xze1vcdN2HBxqYr340EsxFMrDUHL3WZM=", "owner": "nix-community", "repo": "home-manager", - "rev": "18fa9f323d8adbb0b7b8b98a8488db308210ed93", + "rev": "066ba0c5cfddbc9e0dddaec73b1561ad38aa8abe", "type": "github" }, "original": { @@ -230,11 +230,11 @@ ] }, "locked": { - "lastModified": 1738018829, - "narHash": "sha256-5Ol5iahMlELx3lWuChyZsqqLk6sP6aqaJCJFw92OZGo=", + "lastModified": 1738437059, + "narHash": "sha256-J+8ecqaP3zD9GHeN8Y4hUapoELSoggp0IZI8laTFt/0=", "owner": "hyprwm", "repo": "hyprgraphics", - "rev": "12cd7034e441a5ebfdef1a090c0788413b4a635b", + "rev": "5ac80e3686a4dfa55d2bd15c81a266b89594a295", "type": "github" }, "original": { @@ -259,11 +259,11 @@ "xdph": "xdph" }, "locked": { - "lastModified": 1738499523, - "narHash": "sha256-vSdIeH/G/qEuz9TTjWWQC7W5VFrYjXRlJrK2zekJK1Y=", + "lastModified": 1738622170, + "narHash": "sha256-M9lm/lbT10cOXcfMMEzRFLehDlVWnkiy38xVDPWyqk4=", "owner": "hyprwm", "repo": "Hyprland", - "rev": "97a24ec6f3abd2b2ce4c2e00627679a2713848dd", + "rev": "5e7292434a9189d0550187f8a6fb687848194a41", "type": "github" }, "original": { @@ -284,11 +284,11 @@ ] }, "locked": { - "lastModified": 1737556638, - "narHash": "sha256-laKgI3mr2qz6tas/q3tuGPxMdsGhBi/w+HO+hO2f1AY=", + "lastModified": 1738422629, + "narHash": "sha256-5v+bv75wJWvahyM2xcMTSNNxmV8a7hb01Eey5zYnBJw=", "owner": "hyprwm", "repo": "hyprland-protocols", - "rev": "4c75dd5c015c8a0e5a34c6d02a018a650f57feb5", + "rev": "755aef8dab49d0fc4663c715fa4ad221b2aedaed", "type": "github" }, "original": { @@ -473,10 +473,10 @@ "nix-secrets": { "flake": false, "locked": { - "lastModified": 1738498247, - "narHash": "sha256-xMq5P/UOmLy5iaQo6/5X4JK1MNnmL7EJAfWqPmjtRMQ=", + "lastModified": 1738647282, + "narHash": "sha256-6HEgOqVCaoBBEPvqrLdYxuIs47d0GYYsfxtRqM7Ak6Q=", "ref": "main", - "rev": "270597e8706aead70607fbed0a78366ed9c2b3c5", + "rev": "314b4c2745e277d28132d7988f7e3e6f3424fddb", "shallow": true, "type": "git", "url": "ssh://git@git.dogar.dev/shahab/nix-secrets" @@ -490,11 +490,11 @@ }, "nixos-hardware": { "locked": { - "lastModified": 1738471961, - "narHash": "sha256-cgXDFrplNGs7bCVzXhRofjD8oJYqqXGcmUzXjHmip6Y=", + "lastModified": 1738638143, + "narHash": "sha256-ZYMe4c4OCtIUBn5hx15PEGr0+B1cNEpl2dsaLxwY2W0=", "owner": "NixOS", "repo": "nixos-hardware", - "rev": "537286c3c59b40311e5418a180b38034661d2536", + "rev": "9bdd53f5908453e4d03f395eb1615c3e9a351f70", "type": "github" }, "original": { @@ -506,11 +506,11 @@ }, "nixpkgs": { "locked": { - "lastModified": 1737885589, - "narHash": "sha256-Zf0hSrtzaM1DEz8//+Xs51k/wdSajticVrATqDrfQjg=", + "lastModified": 1738410390, + "narHash": "sha256-xvTo0Aw0+veek7hvEVLzErmJyQkEcRk6PSR4zsRQFEc=", "owner": "NixOS", "repo": "nixpkgs", - "rev": "852ff1d9e153d8875a83602e03fdef8a63f0ecf8", + "rev": "3a228057f5b619feb3186e986dbe76278d707b6e", "type": "github" }, "original": { diff --git a/nixos/configuration.nix b/nixos/configuration.nix index 923c8f4..c1ff5c3 100644 --- a/nixos/configuration.nix +++ b/nixos/configuration.nix @@ -126,18 +126,18 @@ in isNormalUser = true; description = "Shahab Dogar"; extraGroups = [ "networkmanager" "wheel" "input" "libvirtd" ]; - hashedPasswordFile = config.sops.secrets.shahab_passwd.path; + hashedPasswordFile = config.sops.secrets."user_passwords/shahab".path; }; sops = { defaultSopsFile = "${secretspath}/secrets.yaml"; age = { sshKeyPaths = ["/home/shahab/.ssh/id_ed25519"]; - keyFile = "/home/shahab/.config/sops/age/key.txt"; + keyFile = "/home/shahab/.config/sops/age/keys.txt"; generateKey = true; }; secrets = { - shahab_passwd = { + "user_passwords/shahab" = { neededForUsers = true; }; }; @@ -162,6 +162,7 @@ in spice-protocol win-virtio win-spice + sops sbctl # Secure boot # Gaming stuff