flake: migrate to agenix-rekey

This commit is contained in:
Infinidoge 2025-02-18 21:47:38 -05:00
parent 26734c2196
commit b54be3998f
Signed by: Infinidoge
SSH key fingerprint: SHA256:oAMyvotlNFraMmZmr+p6AxnNfW/GioTs1pOn3V4tQ7A
61 changed files with 306 additions and 190 deletions

View file

@ -126,6 +126,7 @@ lib.makeExtensible (
disko = import ./disko.nix { inherit lib; };
filesystems = import ./filesystems.nix { inherit lib self; };
secrets = import ./secrets.nix;
}
// (import ./digga.nix { inherit lib; })
// (import ./hosts.nix { inherit lib; })

13
lib/secrets.nix Normal file
View file

@ -0,0 +1,13 @@
{
withOwnerGroup = name: rekeyFile: {
owner = name;
group = name;
mode = "440";
inherit rekeyFile;
};
withOwner = owner: rekeyFile: { inherit owner rekeyFile; };
withGroup = group: rekeyFile: {
inherit group rekeyFile;
mode = "440";
};
}