54 lines
1.4 KiB
Nix
54 lines
1.4 KiB
Nix
{
|
|
config,
|
|
lib,
|
|
pkgs,
|
|
inputs,
|
|
...
|
|
}: let
|
|
microcaBin = "${pkgs.microca}/bin/microca";
|
|
microca = pkgs.writeScriptBin "microca" ''
|
|
#!/usr/bin/env sh
|
|
${microcaBin} -ca-key /run/secrets/ca_key -ca-cert /run/secrets/ca_cert $@
|
|
'';
|
|
in
|
|
with lib; {
|
|
options = {
|
|
nixManager = {
|
|
enable = mkEnableOption "Configure host as nix-conf manager.";
|
|
user = mkOption {
|
|
type = types.str;
|
|
default = "root";
|
|
description = ''
|
|
User who will own the private key.
|
|
'';
|
|
};
|
|
};
|
|
};
|
|
|
|
config = mkIf config.nixManager.enable {
|
|
sops.defaultSopsFile = config.xin-secrets.manager;
|
|
sops.secrets = {
|
|
xin_status_key = {owner = config.nixManager.user;};
|
|
xin_status_pubkey = {owner = config.nixManager.user;};
|
|
manager_key = {owner = config.nixManager.user;};
|
|
manager_pubkey = {owner = config.nixManager.user;};
|
|
ca_key = {owner = config.nixManager.user;};
|
|
ca_cert = {owner = config.nixManager.user;};
|
|
po_env = {owner = config.nixManager.user;};
|
|
};
|
|
environment.systemPackages = [
|
|
microca
|
|
inputs.xintray.packages.${pkgs.system}.xintray
|
|
inputs.po.packages.${pkgs.system}.po
|
|
];
|
|
networking = {
|
|
hosts = {
|
|
"66.135.2.235" = ["ns1"];
|
|
"23.234.251.216" = ["ns2"];
|
|
"46.23.94.18" = ["ns3"];
|
|
"198.23.149.18" = ["ns4"];
|
|
};
|
|
};
|
|
};
|
|
}
|