aboutsummaryrefslogtreecommitdiff
path: root/machines/argonath.nix
diff options
context:
space:
mode:
authorFranck Cuny <franck@fcuny.net>2026-01-09 19:11:37 -0800
committerFranck Cuny <franck@fcuny.net>2026-01-12 08:20:24 -0800
commit72307e4dca688a5f2b88cef26273aaa6a5e189db (patch)
tree7883bd1387cac0c0ad9180ef75fe0b98965706df /machines/argonath.nix
parentclean up ssh keys for the admin user (diff)
downloadinfra-72307e4dca688a5f2b88cef26273aaa6a5e189db.tar.gz
don't use agenix from home manager
Install the key with the host's configuration and rekey the secrets.
Diffstat (limited to '')
-rw-r--r--machines/argonath.nix16
1 files changed, 8 insertions, 8 deletions
diff --git a/machines/argonath.nix b/machines/argonath.nix
index 3d1b1eb..d1f1f7e 100644
--- a/machines/argonath.nix
+++ b/machines/argonath.nix
@@ -1,5 +1,13 @@
{ adminUser, ... }:
{
+ wgPublicKey = "vTItDh9YPnA+8hL1kIK+7EHv0ol3qvhfAfz790miw1w=";
+ publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHi9jHqRjpMzXlznTXi4nEtlRlFfyIzB6Ur9A+HDfFoq";
+
+ age.secrets = {
+ wireguard.file = ../secrets/argonath/wireguard.age;
+ acme-cloudflare-env.file = ../secrets/acme-cloudflare-env.age;
+ };
+
imports = [
../profiles/core-metrics.nix
../profiles/defaults.nix
@@ -15,14 +23,6 @@
networking.hostName = "argonath";
- wgPublicKey = "vTItDh9YPnA+8hL1kIK+7EHv0ol3qvhfAfz790miw1w=";
- publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHi9jHqRjpMzXlznTXi4nEtlRlFfyIzB6Ur9A+HDfFoq";
-
- age.secrets = {
- wireguard.file = ../secrets/argonath/wireguard.age;
- acme-cloudflare-env.file = ../secrets/acme-cloudflare-env.age;
- };
-
system.stateVersion = "25.05"; # Did you read the comment?
home-manager.users.${adminUser.name} = {