Start using age for secret management

machines/kharbranth/default.nix

@@ -18,6 +18,7 @@
     docker.enable = true;
     eid.enable = true;
     git.email = "charlotte.vanpetegem@ugent.be";
+    sshd.enable = true;
     zfs = {
       enable = true;
       encrypted = true;

machines/kharbranth/hardware.nix

@@ -22,31 +22,36 @@
   fileSystems."/" = {
     device = "rpool/local/root";
     fsType = "zfs";
+    neededForBoot = true;
   };
 
   fileSystems."/nix" = {
     device = "rpool/local/nix";
     fsType = "zfs";
+    neededForBoot = true;
   };
 
   fileSystems."/nix/store" = {
     device = "rpool/local/nix-store";
     fsType = "zfs";
-  };
-
-  fileSystems."/boot" = {
-    device = "/dev/disk/by-uuid/A5BA-352A";
-    fsType = "vfat";
+    neededForBoot = true;
   };
 
   fileSystems."/cache" = {
     device = "rpool/local/cache";
     fsType = "zfs";
+    neededForBoot = true;
   };
 
   fileSystems."/data" = {
     device = "rpool/safe/data";
     fsType = "zfs";
+    neededForBoot = true;
+  };
+
+  fileSystems."/boot" = {
+    device = "/dev/disk/by-uuid/A5BA-352A";
+    fsType = "vfat";
   };
 
   swapDevices = [

machines/kholinar/default.nix

@@ -34,6 +34,7 @@
     eid.enable = true;
     git.email = "charlotte@vanpetegem.me";
     minecraft.client = true;
+    sshd.enable = true;
     zeroad.enable = true;
     zfs = {
       enable = true;

machines/kholinar/hardware.nix

@@ -22,24 +22,27 @@
   fileSystems."/" = {
     device = "rpool/local/root";
     fsType = "zfs";
+    neededForBoot = true;
   };
 
   fileSystems."/nix" = {
     device = "rpool/local/nix";
     fsType = "zfs";
+    neededForBoot = true;
   };
 
   fileSystems."/data" = {
     device = "rpool/safe/data";
     fsType = "zfs";
+    neededForBoot = true;
   };
 
   fileSystems."/cache" = {
     device = "rpool/local/cache";
     fsType = "zfs";
+    neededForBoot = true;
   };
 
-
   fileSystems."/boot" = {
     device = "/dev/disk/by-uuid/BEEE-D83A";
     fsType = "vfat";

machines/lasting-integrity/hardware.nix

@@ -25,22 +25,27 @@
     "/" = {
       device = "zroot/local/root";
       fsType = "zfs";
+      neededForBoot = true;
     };
     "/nix" = {
       device = "zroot/local/nix";
       fsType = "zfs";
+      neededForBoot = true;
     };
     "/nix/store" = {
       device = "zroot/local/nix-store";
       fsType = "zfs";
+      neededForBoot = true;
     };
     "/data" = {
       device = "zroot/safe/data";
       fsType = "zfs";
+      neededForBoot = true;
     };
     "/cache" = {
       device = "zroot/safe/cache";
       fsType = "zfs";
+      neededForBoot = true;
     };
     "/srv/data" = {
       device = "zdata/data";

machines/urithiru/hardware.nix

@@ -25,22 +25,27 @@
     "/" = {
       device = "zroot/local/root";
       fsType = "zfs";
+      neededForBoot = true;
     };
     "/nix" = {
       device = "zroot/local/nix";
       fsType = "zfs";
+      neededForBoot = true;
     };
     "/nix/store" = {
       device = "zroot/local/nix-store";
       fsType = "zfs";
+      neededForBoot = true;
     };
     "/data" = {
       device = "zroot/safe/data";
       fsType = "zfs";
+      neededForBoot = true;
     };
     "/cache" = {
       device = "zroot/safe/cache";
       fsType = "zfs";
+      neededForBoot = true;
     };
     "/srv/data" = {
       device = "zdata/data";