Infinidoge/universe
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(nix): sign nix store packages

Browse source
This commit is contained in:
Infinidoge 2022-05-16 09:19:06 -04:00
parent cc6c5c50b5
commit b8b0ae34c6
5 changed files with 14 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

7
modules/devos/cachix/ssh.nix
View file

@ -1,7 +1,12 @@
{ config, lib, ... }: { config, lib, ... }:
{ {
nix.settings.substituters = lib.mkIf (config.networking.hostName != "Infini-DESKTOP" && config.info.loc.home) nix.settings = {
substituters = lib.mkIf (config.networking.hostName != "Infini-DESKTOP" && config.info.loc.home)
((if config.info.loc.home then (lib.mkOrder 300) else lib.mkAfter) [ ((if config.info.loc.home then (lib.mkOrder 300) else lib.mkAfter) [
"ssh://infini-desktop" "ssh://infini-desktop"
]); ]);
trusted-public-keys = [
"infinidoge-1:uw2A6JHHdGJ9GPk0NEDnrdfVkPp0CUY3zIvwVgNlrSk="
];
};
} }

4
modules/devos/nix.nix
View file

@ -29,7 +29,9 @@ with lib;
keep-outputs = true keep-outputs = true
keep-derivations = true keep-derivations = true
fallback = true fallback = true
''; '' + (if config.modules.secrets.enable then ''
secret-key-files = ${config.secrets.binary-cache-private-key}
'' else "");
# nixPath = [ # nixPath = [
# "nixpkgs=${channel.input}" # "nixpkgs=${channel.input}"

BIN
secrets/binary-cache-private-key.age Normal file
View file

Binary file not shown.

1
secrets/binary-cache-public-key Normal file
View file

@ -0,0 +1 @@
infinidoge-1:uw2A6JHHdGJ9GPk0NEDnrdfVkPp0CUY3zIvwVgNlrSk=

1
secrets/secrets.nix
View file

@ -20,4 +20,5 @@ in
"wireless.age".publicKeys = allKeys; "wireless.age".publicKeys = allKeys;
"infinidoge-password.age".publicKeys = allKeys; "infinidoge-password.age".publicKeys = allKeys;
"root-password.age".publicKeys = allKeys; "root-password.age".publicKeys = allKeys;
"binary-cache-private-key.age".publicKeys = allKeys;
} }