chvp/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Remove all git-crypt

Browse source
This commit is contained in:
Charlotte Van Petegem 2021-09-16 15:24:35 +02:00
parent 22836a44d7
commit 97409f47e4
No known key found for this signature in database
GPG key ID: 019E764B7184435A
19 changed files with 86 additions and 47 deletions
Download patch file Download diff file Expand all files Collapse all files

18
modules/work/vpn/default.nix
View file

@ -1,10 +1,6 @@
{ config, lib, pkgs, ... }:
{
imports = [
./secret.nix
];
options = {
chvp.work.vpn.enable = lib.mkOption {
default = false;
@ -17,10 +13,16 @@
ugent-global-vpn = {
after = [ "network.target" ];
conflicts = [ "ugent-local-vpn.service" ];
path = [ pkgs.sshuttle pkgs.openssh pkgs.bash ];
environment = { PASSWORD_FILE = config.age.secrets."passwords/ugent-vpn".path; };
serviceConfig.ExecStart = config.age.secrets."files/programs/vpn/global".path;
};
ugent-local-vpn = {
after = [ "network.target" ];
conflicts = [ "ugent-global-vpn.service" ];
path = [ pkgs.sshuttle pkgs.openssh pkgs.bash ];
environment = { PASSWORD_FILE = config.age.secrets."passwords/ugent-vpn".path; };
serviceConfig.ExecStart = config.age.secrets."files/programs/vpn/local".path;
};
};
security.polkit.extraConfig = ''
@ -34,5 +36,13 @@
});
'';
age.secrets."passwords/ugent-vpn".file = ../../../secrets/passwords/ugent-vpn.age;
age.secrets."files/programs/vpn/local" = {
file = ../../../secrets/files/programs/vpn/local.age;
mode = "0500";
};
age.secrets."files/programs/vpn/global" = {
file = ../../../secrets/files/programs/vpn/global.age;
mode = "0500";
};
};
}

BIN
modules/work/vpn/secret.nix
View file

Binary file not shown.