1

Flake: Add agenix

This commit is contained in:
2025-07-09 03:09:31 +02:00
parent b012f42a95
commit 10590dd387
3 changed files with 101 additions and 5 deletions

90
flake.lock generated
View File

@ -1,5 +1,50 @@
{ {
"nodes": { "nodes": {
"agenix": {
"inputs": {
"darwin": "darwin",
"home-manager": "home-manager",
"nixpkgs": [
"nixpkgs"
],
"systems": "systems"
},
"locked": {
"lastModified": 1750173260,
"narHash": "sha256-9P1FziAwl5+3edkfFcr5HeGtQUtrSdk/MksX39GieoA=",
"owner": "ryantm",
"repo": "agenix",
"rev": "531beac616433bac6f9e2a19feb8e99a22a66baf",
"type": "github"
},
"original": {
"owner": "ryantm",
"repo": "agenix",
"type": "github"
}
},
"darwin": {
"inputs": {
"nixpkgs": [
"agenix",
"nixpkgs"
]
},
"locked": {
"lastModified": 1744478979,
"narHash": "sha256-dyN+teG9G82G+m+PX/aSAagkC+vUv0SgUw3XkPhQodQ=",
"owner": "lnl7",
"repo": "nix-darwin",
"rev": "43975d782b418ebf4969e9ccba82466728c2851b",
"type": "github"
},
"original": {
"owner": "lnl7",
"ref": "master",
"repo": "nix-darwin",
"type": "github"
}
},
"devshell": { "devshell": {
"inputs": { "inputs": {
"nixpkgs": "nixpkgs" "nixpkgs": "nixpkgs"
@ -128,7 +173,7 @@
}, },
"flake-utils": { "flake-utils": {
"inputs": { "inputs": {
"systems": "systems" "systems": "systems_2"
}, },
"locked": { "locked": {
"lastModified": 1726560853, "lastModified": 1726560853,
@ -146,7 +191,7 @@
}, },
"flake-utils_2": { "flake-utils_2": {
"inputs": { "inputs": {
"systems": "systems_2" "systems": "systems_3"
}, },
"locked": { "locked": {
"lastModified": 1731533236, "lastModified": 1731533236,
@ -215,6 +260,27 @@
} }
}, },
"home-manager": { "home-manager": {
"inputs": {
"nixpkgs": [
"agenix",
"nixpkgs"
]
},
"locked": {
"lastModified": 1745494811,
"narHash": "sha256-YZCh2o9Ua1n9uCvrvi5pRxtuVNml8X2a03qIFfRKpFs=",
"owner": "nix-community",
"repo": "home-manager",
"rev": "abfad3d2958c9e6300a883bd443512c55dfeb1be",
"type": "github"
},
"original": {
"owner": "nix-community",
"repo": "home-manager",
"type": "github"
}
},
"home-manager_2": {
"inputs": { "inputs": {
"nixpkgs": [ "nixpkgs": [
"nixpkgs" "nixpkgs"
@ -414,7 +480,7 @@
"nixpkgs" "nixpkgs"
], ],
"nuschtosSearch": "nuschtosSearch", "nuschtosSearch": "nuschtosSearch",
"systems": "systems_3" "systems": "systems_4"
}, },
"locked": { "locked": {
"lastModified": 1751492444, "lastModified": 1751492444,
@ -526,9 +592,10 @@
}, },
"root": { "root": {
"inputs": { "inputs": {
"agenix": "agenix",
"devshell": "devshell", "devshell": "devshell",
"hardware": "hardware", "hardware": "hardware",
"home-manager": "home-manager", "home-manager": "home-manager_2",
"nix-alien": "nix-alien", "nix-alien": "nix-alien",
"nix-flatpak": "nix-flatpak", "nix-flatpak": "nix-flatpak",
"nix-topology": "nix-topology", "nix-topology": "nix-topology",
@ -582,6 +649,21 @@
"repo": "default", "repo": "default",
"type": "github" "type": "github"
} }
},
"systems_4": {
"locked": {
"lastModified": 1681028828,
"narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
"owner": "nix-systems",
"repo": "default",
"rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
"type": "github"
},
"original": {
"owner": "nix-systems",
"repo": "default",
"type": "github"
}
} }
}, },
"root": "root", "root": "root",

View File

@ -16,6 +16,10 @@
home-manager.url = "github:nix-community/home-manager"; home-manager.url = "github:nix-community/home-manager";
home-manager.inputs.nixpkgs.follows = "nixpkgs"; home-manager.inputs.nixpkgs.follows = "nixpkgs";
# Agenix
agenix.url = "github:ryantm/agenix";
agenix.inputs.nixpkgs.follows = "nixpkgs";
# Nix User Repository (e.g. Firefox addons) # Nix User Repository (e.g. Firefox addons)
nur.url = "github:nix-community/NUR"; nur.url = "github:nix-community/NUR";
nur.inputs.nixpkgs.follows = "nixpkgs"; nur.inputs.nixpkgs.follows = "nixpkgs";
@ -134,7 +138,7 @@
# NOTE: Keep public keys here so they're easy to rotate # NOTE: Keep public keys here so they're easy to rotate
publicKeys = { publicKeys.christoph = {
ssh = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJAoJac+GdGtzblCMA0lBfMdSR6aQ4YyovrNglCFGIny christoph.urlacher@protonmail.com"; ssh = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJAoJac+GdGtzblCMA0lBfMdSR6aQ4YyovrNglCFGIny christoph.urlacher@protonmail.com";
}; };
in { in {
@ -172,9 +176,13 @@
hostname = "nixinator"; hostname = "nixinator";
username = "christoph"; username = "christoph";
headless = false; headless = false;
# Extra NixOS system modules.
# HM modules are passed through home/modules/default.nix
extraModules = [ extraModules = [
# TODO: # TODO:
# inputs.nix-topology.nixosModules.default # inputs.nix-topology.nixosModules.default
inputs.agenix.nixosModules.default
]; ];
}; };
nixtop = mylib.nixos.mkNixosConfigWithHomeManagerModule { nixtop = mylib.nixos.mkNixosConfigWithHomeManagerModule {
@ -185,6 +193,7 @@
extraModules = [ extraModules = [
# TODO: # TODO:
# inputs.nix-topology.nixosModules.default # inputs.nix-topology.nixosModules.default
inputs.agenix.nixosModules.default
]; ];
}; };
servenix = mylib.nixos.mkNixosConfigWithHomeManagerModule { servenix = mylib.nixos.mkNixosConfigWithHomeManagerModule {
@ -195,6 +204,7 @@
extraModules = [ extraModules = [
# TODO: # TODO:
# inputs.nix-topology.nixosModules.default # inputs.nix-topology.nixosModules.default
inputs.agenix.nixosModules.default
]; ];
}; };
thinknix = mylib.nixos.mkNixosConfigWithHomeManagerModule { thinknix = mylib.nixos.mkNixosConfigWithHomeManagerModule {
@ -205,6 +215,7 @@
extraModules = [ extraModules = [
# TODO: # TODO:
# inputs.nix-topology.nixosModules.default # inputs.nix-topology.nixosModules.default
inputs.agenix.nixosModules.default
]; ];
}; };

View File

@ -248,6 +248,9 @@ with mylib.networking; {
libimobiledevice libimobiledevice
ifuse ifuse
usbmuxd usbmuxd
# Secrets handling
inputs.agenix.packages.${system}.default
]; ];
# It is preferred to use the module (if it exists) over environment.systemPackages, # It is preferred to use the module (if it exists) over environment.systemPackages,