This repository has no description
928 B
38 lines
1{ config, pkgs, ... }:
2{
3 imports = [
4 ../../configs
5 ../../configs/retiolum.nix
6 ../../configs/syncthing.nix
7 ../../configs/services/radio
8 ../../configs/autoupdate.nix
9 ];
10
11 clan.core.vars.password-store.secretLocation = "/var/state/secret-vars";
12
13 krebs.build.host = config.krebs.hosts.radio;
14 system.stateVersion = "24.05";
15
16 security.acme = {
17 acceptTerms = true;
18 defaults.email = "acme@lassul.us";
19 };
20
21 krebs.sync-containers3.inContainer = {
22 enable = true;
23 pubkey = config.clan.core.vars.generators.radio-sync.files."radio.sync.pub".value;
24 };
25
26 clan.core.vars.generators.radio-sync = {
27 files."radio.sync.key" = { };
28 files."radio.sync.pub".secret = false;
29 runtimeInputs = with pkgs; [
30 coreutils
31 openssh
32 ];
33 script = ''
34 ssh-keygen -t ed25519 -N "" -f "$out"/radio.sync.key
35 mv "$out"/radio.sync.key.pub "$out"/radio.sync.pub
36 '';
37 };
38}