ambroisie/nix-config
ambroisie/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

modules: secrets: move host-specific secrets

Browse source
This commit is contained in:
Bruno BELANYI 2023-04-13 16:48:37 +00:00
parent 57008bcb7c
commit 6079485b50
27 changed files with 52 additions and 55 deletions
Download patch file Download diff file Expand all files Collapse all files

BIN
hosts/nixos/porthos/secrets/sso/ambroisie/password-hash.age Normal file
View file

Binary file not shown.

BIN
hosts/nixos/porthos/secrets/sso/ambroisie/totp-secret.age Normal file
View file

Binary file not shown.

BIN
hosts/nixos/porthos/secrets/sso/auth-key.age Normal file
View file

Binary file not shown.

21
hosts/nixos/porthos/secrets/sso/default.nix Normal file
View file

@ -0,0 +1,21 @@
{ lib }:
let
inherit (lib) fileContents;
importUser = (user: {
# bcrypt hashed: `htpasswd -BnC 10 ""`
passwordHash = fileContents (./. + "/${user}/password-hash.txt");
# base32 encoded: `printf '<secret>' | base32 | tr -d =`
totpSecret = fileContents (./. + "/${user}/totp-secret.txt");
});
in
{
auth_key = fileContents ./auth-key.txt;
users = lib.flip lib.genAttrs importUser [
"ambroisie"
];
groups = {
root = [ "ambroisie" ];
};
}