Extracted modules: - Matrix homeserver (matrix-continuwuity.nix) - mautrix bridges (slack, whatsapp, gmessages) - Security modules (fail2ban, ssh-hardening) - Development services module - Matrix secrets module All modules sanitized to remove personal information: - Domains: example.com, matrix.example.org - IPs: 10.0.0.x, 203.0.113.10 - Paths: /home/user, /path/to/ops-base - Emails: admin@example.com Configuration: - Updated flake.nix with sops-nix and nixpkgs-unstable - Updated hosts/ops-jrz1.nix to import all extracted modules - Added example files (secrets, minimal config) - Generated flake.lock Generated with Claude Code - https://claude.com/claude-code
17 lines
533 B
Plaintext
17 lines
533 B
Plaintext
# sops-nix configuration for age encryption
|
|
# Copy this file to .sops.yaml and replace with your age public key
|
|
#
|
|
# Generate an age key pair:
|
|
# age-keygen -o ~/.config/sops/age/keys.txt
|
|
# # Extract public key: age1... from the generated file
|
|
#
|
|
# Then encrypt secrets:
|
|
# sops -e -i secrets/secrets.yaml
|
|
|
|
creation_rules:
|
|
- path_regex: secrets/secrets\.yaml$
|
|
key_groups:
|
|
- age:
|
|
# Replace with your age public key (starts with age1...)
|
|
- age1xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
|