This repository has no description
1.9 kB
71 lines
1{
2 config,
3 pkgs,
4 ...
5}:
6{
7 clan.core.vars.password-store.secretLocation = "/var/state/secret-vars";
8
9 imports = [
10 ../../configs
11 ../../configs/retiolum.nix
12
13 ../../configs/syncthing.nix
14
15 ../../configs/pass.nix
16
17 # disabled: eternal-terminal 7.0.0 fails to build in the current nixpkgs
18 # (cmake_pch.hxx.gch error)
19 # ../../configs/et-server.nix
20
21 ../../configs/atuin-server.nix
22 ../../configs/autoupdate.nix
23 ];
24
25 lass.sync-containers3.inContainer = {
26 enable = true;
27 pubkey = config.clan.core.vars.generators.green-container.files."green.sync.pub".path;
28 };
29
30 clan.core.vars.generators.green-container = {
31 files."green.sync.key" = { };
32 files."green.sync.pub".secret = false;
33 runtimeInputs = with pkgs; [
34 coreutils
35 openssh
36 ];
37 script = ''
38 ssh-keygen -t ed25519 -N "" -f "$out"/green.sync.key
39 mv "$out"/green.sync.key.pub "$out"/green.sync.pub
40 '';
41 };
42
43 systemd.tmpfiles.rules = [
44 "d /home/lass/.local/share 0700 lass users -"
45 "d /home/lass/.local 0700 lass users -"
46 "d /home/lass/.config 0700 lass users -"
47
48 "d /var/state/lass_ssh 0700 lass users -"
49 "L+ /home/lass/.ssh - - - - ../../var/state/lass_ssh"
50 "d /var/state/lass_gpg 0700 lass users -"
51 "L+ /home/lass/.gnupg - - - - ../../var/state/lass_gpg"
52 "d /var/state/lass_sync 0700 lass users -"
53 "L+ /home/lass/sync - - - - ../../var/state/lass_sync"
54
55 "d /var/state/git 0700 git nogroup -"
56 "L+ /var/lib/git - - - - ../../var/state/git"
57
58 "d /var/state/zerotier-one 0700 root root -"
59 "L+ /var/lib/zerotier-one - - - - ../../var/state/zerotier-one"
60 ];
61
62 # workaround for ssh access from yubikey via android
63 services.openssh.extraConfig = ''
64 HostKeyAlgorithms +ssh-rsa
65 PubkeyAcceptedAlgorithms +ssh-rsa
66 '';
67
68 environment.systemPackages = [
69 pkgs.rbw
70 ];
71}