diff --git a/modules/hosts/computer-mo/computer-mo.nix b/modules/hosts/computer-mo/computer-mo.nix index 73ec3bb..1036862 100644 --- a/modules/hosts/computer-mo/computer-mo.nix +++ b/modules/hosts/computer-mo/computer-mo.nix @@ -24,6 +24,7 @@ gnome-sys-gdm-mo gnome-sys-gnome gnome-sys-gnome-apps + platform-sys-cache security-sys-secureboot security-sys-sopsnix users-sys-mo diff --git a/modules/platform/cache.nix b/modules/platform/cache.nix new file mode 100644 index 0000000..3bd3edf --- /dev/null +++ b/modules/platform/cache.nix @@ -0,0 +1,10 @@ +{ ... }: { + flake.nixosModules.platform-sys-cache = { config, ... }: { + sops.secrets."garnix/token" = {}; + nix.settings = { + substituters = [ "https://cache.garnix.io" ]; + trusted-public-keys = [ "cache.garnix.io:CTFPyKSLcx5RMJKfLo5EEPUObbA78b0YQ2DTCJXqr9g=" ]; + netrc-file = config.sops.secrets."garnix/token".path; + }; + }; +} diff --git a/modules/security/secrets/secrets.yaml b/modules/security/secrets/secrets.yaml index 3d4c668..81a8ae9 100644 --- a/modules/security/secrets/secrets.yaml +++ b/modules/security/secrets/secrets.yaml @@ -1,3 +1,5 @@ +garnix: + token: ENC[AES256_GCM,data:pi2oZfXAKKoCKsskCXBhqrtIUFZ48fzyzajUUOgh8k9VtAzPgZg/6n9f0CmNFxQy+toEMNjO6I3+XYOlOpRtJcmleKsLA/iivZ7/kOrOHyYU/vPu4idEfPtoZVU=,iv:EzGVpcmFfymo3lxpXntqETZeDPqa2+uzarl7LWmcNxQ=,tag:Ypnw1yboiWjAvnHRrE4lnA==,type:str] ssh: extern: public: ENC[AES256_GCM,data:17IGbPOFayYsULH1zw/cLpP0omq6bWla5hPuHjDpf5Hw7PzU1wBuGE4sdntDAD6sfU5kf3gGvlpLMUK+G6xmUN3HYFi8TGKHMhatbFCQv7A=,iv:6EWzSXY09HNWSBcxPx7nMuedASOjNcoKeow5G3XmA00=,tag:M57xzggAioaA8xdWlToG6g==,type:str] @@ -36,7 +38,7 @@ sops: aGtPSmlXQzZERnRhTGh0Yk1zWllyZVEKvsjK52TUJeuxoY3W8Acp1CASclwYMH6Q jGHMz+/mQ2OfiDDl2u1X/aPftOgRc2RLZDXKg1kS1+WgQa/wMxZXhw== -----END AGE ENCRYPTED FILE----- - lastmodified: "2026-03-08T21:40:06Z" - mac: ENC[AES256_GCM,data:+XUXOIyo+aNwRJ6McSarq3YE/I3AXmufwAzDkAZOfZeqpcAO0nDu25Ko7qVrKszQQs+phI+1aAANdD9CnS8b4xwE0gbkeMp/4SJzfSVwUQ16+E4ieiSl6B344gCZfNv42sm35OkmvIZPHCxMSGaX4DX+aeIXSm59tMTIEa8YWcE=,iv:B6iznGnZD36SbVqmD/UamfCn3igwT7735FifkiH5SVc=,tag:fTK5CA99DX/i5fuIZYbGeg==,type:str] + lastmodified: "2026-03-11T09:51:00Z" + mac: ENC[AES256_GCM,data:SlA0ghRha16VHWCZWMV25D7Z3lqwCsQjpzsXVWnHnjib6dbjENQVrBMLc5qwKEgLsq6G7JEjks+ClJ4A6+0IUX5IpRC/6DnwWVaTnWZEked2EL5aYKcptCPDr1mqzr/v1xCfrnKxnTap1RnAu4ND0WoXQ7K+iASympZlhNsYSEg=,iv:UBRWmTaxkYjTy/litanRz5vA4g4RlEPy5s3Q44SqZWs=,tag:9BTm1iAmaQSBvtFBQynDyg==,type:str] unencrypted_suffix: _unencrypted version: 3.12.1