Secrets via nixos-sops, caldav and fixed virt

2 files changed, 18 insertions, 1 deletions

diff --git a/users/remote-build.nix b/users/remote-build.nix
new file mode 100644
index 0000000..7993d70
--- /dev/null
+++ b/users/remote-build.nix
@@ -0,0 +1,16 @@
+{pkgs, config, ...}: {
+
+  sops.secrets.remote_pub = {
+    key = "remote/ssh/pub"; 
+    sopsFile = ../secrets/secrets.yaml;
+  };
+  users.users.remotebuild = {
+    isSystemUser = true; 
+    group = "remotebuild";
+    useDefaultShell = true; 
+    openssh.authorizedKeys.keyFiles = [ ../secrets/eli.pub ];
+  };
+
+  users.groups.remotebuild = {}; 
+  nix.settings.trusted-users = [ "remotebuild" ]; 
+}
diff --git a/users/user-common.nix b/users/user-common.nix
index 4b60044..b6da2bb 100644
--- a/users/user-common.nix
+++ b/users/user-common.nix
@@ -1,4 +1,4 @@
-{pkgs, config, ...}: {
+{pkgs, config, inputs, ...}: {
    # Pass host config to HM (Common config)
    # TODO: Move this somewhere else.
    home-manager = { 
@@ -11,6 +11,7 @@
           _module.args.hostconfig = config;
 
        })
+         inputs.sops-nix.homeManagerModules.sops
      ];
    };
 }