This repository has no description
default: use path of secret generators
author
lassulus
date
(Jan 13, 2024, 1:41 AM CET)
commit
e4f5eddb
e4f5eddb228f2f2eb5f403cb0cb957e649fa3ef8
parent
902fffbe
902fffbe53e6f98b4243a9eacdf67a0a06c78a5c
+5
-3
+5
-3
2configs/default.nix
+5
-3
2configs/default.nix
···
36
36
clanCore.secrets.password = {
37
37
secrets.password = { };
38
38
secrets.passwordHash = { };
39
+
generator.path = with pkgs; [ coreutils xkcdpass mkpasswd ];
39
40
generator.script = ''
40
-
${pkgs.xkcdpass}/bin/xkcdpass -n 4 -d - > $secrets/password
41
-
cat $secrets/password | ${pkgs.mkpasswd}/bin/mkpasswd -s -m sha-512 > $secrets/passwordHash
41
+
xkcdpass -n 4 -d - > $secrets/password
42
+
cat $secrets/password | mkpasswd -s -m sha-512 > $secrets/passwordHash
42
43
'';
43
44
};
44
45
}
···
51
52
clanCore.secrets.ssh = {
52
53
secrets."ssh.id_ed25519" = { };
53
54
facts."ssh.id_ed25519.pub" = { };
55
+
generator.path = with pkgs; [ coreutils openssh ];
54
56
generator.script = ''
55
-
${pkgs.openssh}/bin/ssh-keygen -t ed25519 -N "" -f $secrets/ssh.id_ed25519
57
+
ssh-keygen -t ed25519 -N "" -f $secrets/ssh.id_ed25519
56
58
mv $secrets/ssh.id_ed25519.pub $facts/ssh.id_ed25519.pub
57
59
'';
58
60
};