diff options
| -rw-r--r-- | hosts/sagittarius/default.nix | 27 | ||||
| -rw-r--r-- | hosts/sagittarius/sops.nix | 4 | ||||
| -rw-r--r-- | secrets/sagittarius-samba-creds.env | 14 |
3 files changed, 44 insertions, 1 deletions
diff --git a/hosts/sagittarius/default.nix b/hosts/sagittarius/default.nix index c0c7f32..9cfb84b 100644 --- a/hosts/sagittarius/default.nix +++ b/hosts/sagittarius/default.nix @@ -1,4 +1,9 @@ -{ config, ... }: +{ + pkgs, + lib, + config, + ... +}: { imports = [ # Include the results of the hardware scan. @@ -12,6 +17,26 @@ boot.loader.grub.device = "/dev/sda"; time.timeZone = "Europe/Helsinki"; + environment.systemPackages = [ pkgs.cifs-utils ]; + fileSystems."/mnt/storage-box" = { + device = "//u423859-sub3.your-storagebox.de/u423859-sub3"; + fsType = "cifs"; + options = + let + opts = lib.concatStringsSep "," [ + "x-systemd.automount" + "noauto" + "x-systemd.idle-timeout=60" + "x-systemd.device-timeout=5s" + "x-systemd.mount-timeout=5s" + "credentials=${config.sops.secrets.samba-creds.path}" + ]; + in + # No clue whether doing it like this is neccessary, but the wiki does it + # like this + [ opts ]; + }; + networking = { hostName = "sagittarius"; useNetworkd = true; diff --git a/hosts/sagittarius/sops.nix b/hosts/sagittarius/sops.nix index aa56c9a..01836b3 100644 --- a/hosts/sagittarius/sops.nix +++ b/hosts/sagittarius/sops.nix @@ -9,6 +9,10 @@ sopsFile = ../../secrets/forgejo-runner-token.env; format = "dotenv"; }; + "samba-creds" = { + sopsFile = ../../secrets/sagittarius-samba-creds.env; + format = "dotenv"; + }; }; }; } diff --git a/secrets/sagittarius-samba-creds.env b/secrets/sagittarius-samba-creds.env new file mode 100644 index 0000000..0dc6964 --- /dev/null +++ b/secrets/sagittarius-samba-creds.env @@ -0,0 +1,14 @@ +username=ENC[AES256_GCM,data:1DaR7q0oo+uKf2x3,iv:/z5RrXyug1muw+vK7eJulZ15GSkHWF5aGV4bGE5yHKo=,tag:zDmaFjAkF5QvoT5AJusR6w==,type:str] +password=ENC[AES256_GCM,data:zvC7dyNzH1PBN/hbJQeBFw==,iv:Ev//CwP2PQCSV1YMciTMxXsx1oP0he8uPfbG+4mu/44=,tag:XsKU+/oRfIM+DUi9/+5TbA==,type:str] +sops_age__list_0__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKODh0TVNkdjJoeWxFTnhu\nN3c0NnRWc3dyR0RPR0VpY0lGd2NJOSsvdTNFCjhoRTlyK3VGejlxMVI3UkRoQlg1\nb2pmRUtMV3VFQUNGSVR0NU9WdnBtRm8KLS0tICtSZy9oNXVWLzFuQ0hKeWQ5SDdD\nS0tqTDZ5ajczcVcreEcyYWhUTnVtSUUK4N9JcFTW3TpVSw2O8birSh8uO9Wbbswp\n/NCqeT3wgetyPvP3zPcsfkWEvCsQ6C+OPLlKE71jLevy+/jRddPRZA==\n-----END AGE ENCRYPTED FILE-----\n +sops_age__list_0__map_recipient=age1l088h7umwuxp0sw8wk0stfup0empdnldczxvrhueu7n0vxd0c57q9zvwsk +sops_age__list_1__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrUXFUNmk5NXVlUVRsbmNR\nUTBQVDNSTTNsQzF4ZXRrWDBhRUZUSUErelh3Ck9ZRDhxNlJIUGRhY2JzcWs0WEhw\nMmJ2RUU5b2dkaDBxb3hZNHNZbklCejAKLS0tIGdzMnZOSStodDRvQ2IyMHBFVGJR\nVjBmeEQ1ZzAzcnVYVThldVdtT29zNUkK150LRqZmcjxodjyFCTtkU+GW7EnnRd/8\nnbzvSHMpRL3UtHBBd2GFc6He7Z92dxxyD1VfMk6CgRQsAgt2maP1nw==\n-----END AGE ENCRYPTED FILE-----\n +sops_age__list_1__map_recipient=age1xzqshnlstewfha28sqjp4lf97mm43axyrhga0vkjmt5zx6eydqhsvlsasc +sops_age__list_2__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxUmkzWHJYMHpsUjBHTlpK\nSEdCV2ZzWDEwSDVzRHZTWGpzYUtlUEs0aG1NCnJjWDh2b1YrRWRwNE15UXJVdDFU\nTUFWUDJBdUZBNTlaUXFIMlhWKzIwV28KLS0tIG9pUS9jT3U3V1Era2VYQ1lHaDZY\nM0hQYnRXN3Zqd1ZzTjJDOGZML0pVZU0KztlbftsZBkryoSj+7jysTUOkGfCyRgrD\neNs9Wre0e2XB462lzw1q7/MtYJPwqLQ1is8Syw5ZyktDDPwmH28pyw==\n-----END AGE ENCRYPTED FILE-----\n +sops_age__list_2__map_recipient=age1jmpdssn7555g0pht7zwqq2dvrvzxyu65w6cf2su8pp2fz0zvaykq0jgern +sops_age__list_3__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFQ3VXVGF3WlZEcFIwdmIx\nYVhoSGpxcHZkeEdraGZOaStSZm8za28yb3hRCi9VWjlSSXNlR0ErWWhObG5weTdZ\nN1U0N2dWeDhuU2N4SDg4MW41T1hQUXMKLS0tIEhCQitXZkhJRkNENm1iMW1zcERz\nQVZBVEg2NlZLbnV1MEhXYXo1MlljZWcK+FBwL787RgzZaCia3Cw2hpu+4Hj20Krd\nTNljcbzieRMrhiPdlPESBBR1ZcWQD7egBJlrIotOcz2li2qMezxh1w==\n-----END AGE ENCRYPTED FILE-----\n +sops_age__list_3__map_recipient=age1sffhunmeqmeey29lnvuds59mn74jfpctd3wm0t6svca0fztgvd4qnretc6 +sops_lastmodified=2024-10-19T19:47:00Z +sops_mac=ENC[AES256_GCM,data:/5achQBtokwUDDuYXjQYgKl3bkFne7ec5MuHnvG5S0iNZxnGzotBvJ5LVETbQwnrS3CXPNjmXhTC8tERIKLw7ZrE5u+YeMoBElxF0Ttbj7NbLBchXcLpLdWgTjbgn2OkbRiD563Bw3g312QeYVlkTwnUH7dUrDi5Zn0YfTTb4T4=,iv:eYNWab82IIsTtPw0lOOJ3JH8msdKw2Of+RhavtqTPL8=,tag:wEuItTbVJKYecOqFvjWQ8w==,type:str] +sops_unencrypted_suffix=_unencrypted +sops_version=3.9.1 |