This repository has no description
1.0 kB
40 lines
1{ config, pkgs, ... }:
2{
3 imports = [
4 ../../2configs
5 ../../2configs/retiolum.nix
6 ../../2configs/syncthing.nix
7 ../../2configs/services/radio
8 ../../2configs/autoupdate.nix
9 ];
10
11 clan.password-store.targetDirectory = "/var/state/secrets";
12 clan.core.vars.password-store.secretLocation = "/var/state/secret-vars";
13
14 krebs.build.host = config.krebs.hosts.radio;
15 system.stateVersion = "24.05";
16
17 security.acme = {
18 acceptTerms = true;
19 defaults.email = "acme@lassul.us";
20 };
21
22 krebs.sync-containers3.inContainer = {
23 enable = true;
24 pubkey = config.clan.core.vars.generators.radio-sync.files."radio.sync.pub".value;
25 };
26
27 clan.core.vars.generators.radio-sync = {
28 files."radio.sync.key" = { };
29 files."radio.sync.pub".secret = false;
30 migrateFact = "radio-container";
31 runtimeInputs = with pkgs; [
32 coreutils
33 openssh
34 ];
35 script = ''
36 ssh-keygen -t ed25519 -N "" -f "$out"/radio.sync.key
37 mv "$out"/radio.sync.key.pub "$out"/radio.sync.pub
38 '';
39 };
40}