diff --git a/decryption.key b/decryption.key new file mode 100644 index 0000000..f695f7c Binary files /dev/null and b/decryption.key differ diff --git a/kiosk.nix b/kiosk.nix index bf23da9..f087edf 100644 --- a/kiosk.nix +++ b/kiosk.nix @@ -40,6 +40,20 @@ in systemd.services.cage-tty1.requires = [ "network-online.target" ]; + systemd.services.clone-config = { + wantedBy = [ "multi-user.target" ]; + requires = [ "network-online.target" ]; + path = with pkgs; [ git git-crypt ]; + script = '' + git clone ssh://git@inx.moe:245/Infinidoge/kiosk.git /etc/nixos + cd /etc/nixos + git-crypt unlock /etc/decryption.key + ''; + serviceConfig.Type = "oneshot"; + }; + + environment.etc."decryption.key".source = ./decryption.key; + services.tailscale = { enable = true; extraUpFlags = [ "--advertise-tags" "tag:kiosk" ];