From 3757fb20b9e8e43f0970ce279b5ebe1c28a40473 Mon Sep 17 00:00:00 2001
From: Infinidoge <infinidoge@inx.moe>
Date: Sat, 7 Dec 2024 19:35:20 -0500
Subject: [PATCH] clone and decrypt configuration on boot

---
 decryption.key | Bin 0 -> 170 bytes
 kiosk.nix      |  14 ++++++++++++++
 2 files changed, 14 insertions(+)
 create mode 100644 decryption.key

diff --git a/decryption.key b/decryption.key
new file mode 100644
index 0000000000000000000000000000000000000000..f695f7cfa408d5f88606ee1a7eb6686b61233311
GIT binary patch
literal 170
zcmV;b09F40M@dveQdv+`0Hg1W9bj5{0ifg|<qwQMFcQp!z|&}HKx=4f)KC%!??o(g
z*O|1-YhyLg69?i0`9H&c@3<d>3c4FGx%{p-<8Tja*$DOGrb$rZn6`?F;b3s}Axc$W
z$Bp6q3ECCymB!0(st=QAo7<W_-!h}v-f%IB_RKPIu^~kWH!xhm)dGL^8}T+^NQKoj
Y^!sJlMpkXEOO|;#S$^LMY{|j@(R8g-&Hw-a

literal 0
HcmV?d00001

diff --git a/kiosk.nix b/kiosk.nix
index bf23da9..f087edf 100644
--- a/kiosk.nix
+++ b/kiosk.nix
@@ -40,6 +40,20 @@ in
 
   systemd.services.cage-tty1.requires = [ "network-online.target" ];
 
+  systemd.services.clone-config = {
+    wantedBy = [ "multi-user.target" ];
+    requires = [ "network-online.target" ];
+    path = with pkgs; [ git git-crypt ];
+    script = ''
+      git clone ssh://git@inx.moe:245/Infinidoge/kiosk.git /etc/nixos
+      cd /etc/nixos
+      git-crypt unlock /etc/decryption.key
+    '';
+    serviceConfig.Type = "oneshot";
+  };
+
+  environment.etc."decryption.key".source = ./decryption.key;
+
   services.tailscale = {
     enable = true;
     extraUpFlags = [ "--advertise-tags" "tag:kiosk" ];