dan/ops-jrz1
1
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

Consolidate scattered sops.* keys into single block

Browse source 
Fixes statix W20 warning. No functional change.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
Dan 2026-01-08 12:42:57 -08:00
parent 99927712c5
commit 278017efe3
1 changed files with 23 additions and 26 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

49
hosts/ops-jrz1.nix
View file

@ -26,36 +26,33 @@
networking.hostName = "jrz1";
# sops-nix secrets management
sops.defaultSopsFile = ../secrets/secrets.yaml;
sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
sops = {
defaultSopsFile = ../secrets/secrets.yaml;
age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
sops.secrets.matrix-registration-token = {
# Used by dev-services.nix matrix-continuwuity via systemd LoadCredential
# Root ownership is correct for DynamicUser services
mode = "0400";
};
secrets = {
# Used by dev-services.nix matrix-continuwuity via systemd LoadCredential
# Root ownership is correct for DynamicUser services
matrix-registration-token.mode = "0400";
sops.secrets.maubot-admin-password = {
# Maubot management interface admin password
mode = "0400";
};
# Maubot management interface admin password
maubot-admin-password.mode = "0400";
sops.secrets.maubot-secret-key = {
# Maubot session secret key
mode = "0400";
};
# Maubot session secret key
maubot-secret-key.mode = "0400";
# Slack dev tokens - shared with devs group for learner bot development
sops.secrets.slack-bot-token = {
owner = "root";
group = "devs";
mode = "0440";
};
sops.secrets.slack-app-token = {
owner = "root";
group = "devs";
mode = "0440";
# Slack dev tokens - shared with devs group for learner bot development
slack-bot-token = {
owner = "root";
group = "devs";
mode = "0440";
};
slack-app-token = {
owner = "root";
group = "devs";
mode = "0440";
};
};
};
# Matrix homeserver configuration