From 72a532244594a370f597babf700fb013123d8c17 Mon Sep 17 00:00:00 2001
From: Jakub Stachurski <j.stachurski@student.utwente.nl>
Date: Wed, 5 Nov 2025 01:29:41 +0100
Subject: Secrets via nixos-sops, caldav and fixed virt

---
 common.nix | 16 ++++++++++++----
 1 file changed, 12 insertions(+), 4 deletions(-)

(limited to 'common.nix')

diff --git a/common.nix b/common.nix
index 2b1a479..2ffe4d9 100644
--- a/common.nix
+++ b/common.nix
@@ -1,4 +1,4 @@
-{pkgs, lib, ...}: {
+{pkgs, lib, inputs, config,...}: {
   imports = [
     ./modules
   ]; 
@@ -11,6 +11,11 @@
   };
   time.timeZone = "Europe/Amsterdam"; # Set timezone
 
+  sops.defaultSopsFile = ./secrets/secrets.yaml;
+  sops.age.sshKeyPaths = ["/etc/ssh_host_ed25519_key"]; 
+  sops.age.keyFile = "/var/lib/sops-nix/key.txt"; 
+  sops.age.generateKey = true; 
+
   systemd.oomd = {
     enable = true;
     enableUserSlices = true;
@@ -41,6 +46,10 @@
     ranger
     file
     lm_sensors 
+
+    # Needed for getting credentials
+    age
+    sops 
   
     bashInteractive
     coreutils
@@ -51,7 +60,8 @@
     usbutils
     vim
 
-    # Dev stuff, move later
+    # TODO: Dev stuff, move later
+    # This could really make the image smaller 
     git
     pkg-config
     cmake 
@@ -59,8 +69,6 @@
     gnumake
     clang
     rustup
-
-    # D
   ];
   
   networking.hosts = {
-- 
cgit v1.3.1