voronind/nix
0
0
Fork 0
Code Issues 40 Pull requests Packages Projects Releases Wiki Activity

Crypto : Add GNUPGHOME tmpfs template.

Browse source
This commit is contained in:
Dmitry Voronin 2024-04-09 14:26:36 +03:00
parent ce54cac532
commit f30d0d230f
3 changed files with 19 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
module/common/Crypto.nix
View file

@ -10,6 +10,11 @@
# Extra packages. # Extra packages.
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
yubikey-manager # Yubikey Manager. yubikey-manager # Yubikey Manager.
yubioath-desktop # OTP. # yubioath-desktop # OTP.
]; ];
# Store GPG data on tmpfs.
environment.variables = {
# GNUPGHOME = "$(mktemp -d -t gnupg-$(date +%Y-%m-%d)-XXXXXXXXXX)";
};
} }

4
module/common/Git.nix
View file

@ -1,4 +1,4 @@
{ ... }: { { secret, ... }: {
programs.git = { programs.git = {
enable = true; enable = true;
config = { config = {
@ -7,6 +7,8 @@
pull.rebase = true; pull.rebase = true;
push.autoSetupRemote = true; push.autoSetupRemote = true;
rebase.autoStash = true; rebase.autoStash = true;
user.signingkey = secret.crypto.sign.key;
gpg.format = secret.crypto.sign.format;
}; };
}; };
} }

10
part/Secret.nix
View file

@ -7,4 +7,14 @@
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDBL5NAm8S97EtfB/7DPf5Xl3Cqi3PlSO1V0m7fknNzz root@laptop" "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDBL5NAm8S97EtfB/7DPf5Xl3Cqi3PlSO1V0m7fknNzz root@laptop"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIL2LI1iFDZC223aWqBVz9yusfB/XrRwsBKiL5warIF/ nix-on-droid@phone" "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIL2LI1iFDZC223aWqBVz9yusfB/XrRwsBKiL5warIF/ nix-on-droid@phone"
]; ];
crypto = {
sign = {
format = "ssh";
key = "";
};
publicKeys = [
];
};
} }