diff options
| author | Miran Bastaja <miran.bastaja04@gmail.com> | 2024-10-21 15:39:01 +0200 |
|---|---|---|
| committer | Miran Bastaja <miran.bastaja04@gmail.com> | 2024-10-21 15:39:19 +0200 |
| commit | 7a1bb85a5f65dbcb3df044441dc5fc083942e520 (patch) | |
| tree | a48ebdec8e086369d127343cd91de525847e7fd3 /hosts/wonderland/sops.nix | |
| parent | c6edb9faaa0106a27af2085a9e170715349f070c (diff) | |
Client machines: remove sops
Diffstat (limited to 'hosts/wonderland/sops.nix')
| -rw-r--r-- | hosts/wonderland/sops.nix | 23 |
1 files changed, 0 insertions, 23 deletions
diff --git a/hosts/wonderland/sops.nix b/hosts/wonderland/sops.nix deleted file mode 100644 index 9b76b24..0000000 --- a/hosts/wonderland/sops.nix +++ /dev/null @@ -1,23 +0,0 @@ -{ config, ... }: -{ - sops = { - age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ]; - defaultSopsFile = ../../secrets/credentials.json; - secrets = { - # FIXME: using mode 444 here is a hack so that spotifyd can cat the - # values out, but it obviously exposes the secrets to anyone that knows - # they are there. A better solution would be to override the spotifyd - # module to make the systemd service run the program with a group, and - # then give read priviledges to only that group. - # "spotify/password" = { - # mode = "444"; - # }; - # "spotify/username" = { - # mode = "444"; - # }; - "irc/libera-password" = { - owner = config.users.users.alice.name; - }; - }; - }; # end of sops -} |
