From 3ad338f733ce908dd7f6ed034d43298c3e5c5886 Mon Sep 17 00:00:00 2001 From: Bun Date: Wed, 12 Mar 2025 17:58:52 -0400 Subject: [PATCH] Unencrypt and rename to Bun --- README.md | 3 +++ flake.nix | 2 +- .../users/custom/{jimbo => bun}/default.nix | 5 +++-- system/accounts/users/custom/default.nix | 2 +- system/default.nix | 2 +- system/devices/disks/disko/default.nix | 15 ++++----------- system/secrets/default.nix | Bin 781 -> 779 bytes 7 files changed, 13 insertions(+), 16 deletions(-) rename system/accounts/users/custom/{jimbo => bun}/default.nix (78%) diff --git a/README.md b/README.md index bf533e5..3934a2e 100644 --- a/README.md +++ b/README.md @@ -1,3 +1,6 @@ # ROCKPro64-Server A flake for Jules' ROCKPro64 server. + +For personal use, unlocking secrets can be done with this command: +``gpg --pinentry-mode loopback --decrypt local.key.asc | git-crypt unlock -`` diff --git a/flake.nix b/flake.nix index 237301a..a2bd983 100644 --- a/flake.nix +++ b/flake.nix @@ -18,7 +18,7 @@ ... }@inputs: { - nixosConfigurations.rubble = nixpkgs.lib.nixosSystem { + nixosConfigurations.progesterone = nixpkgs.lib.nixosSystem { modules = [ ./system ]; specialArgs = inputs; }; diff --git a/system/accounts/users/custom/jimbo/default.nix b/system/accounts/users/custom/bun/default.nix similarity index 78% rename from system/accounts/users/custom/jimbo/default.nix rename to system/accounts/users/custom/bun/default.nix index 71f4b4e..192d028 100644 --- a/system/accounts/users/custom/jimbo/default.nix +++ b/system/accounts/users/custom/bun/default.nix @@ -1,13 +1,14 @@ { config, pkgs, ... }: { - users.users.jimbo = { - hashedPassword = config.secrets.jimboAccPass; + users.users.bun = { + hashedPassword = config.secrets.bunAccPass; isNormalUser = true; createHome = true; openssh.authorizedKeys.keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC2lMkUd+BbXITE5LTg94hEzmA6UKsIIbaf5YOjGoLzl Desktop" "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIFGHaxdTeC1xnTx2BY5LLR5LxhdSkmYoWuOeEuRIz0k Server" "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJahAoF74BY6GCTsFkt1ADKaraFgJJozW1Y1aBTLK0j9 Pixel9" + "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHMJtG55GlIRVs6NzN9MeGZUFeduOcbOhFc0QEqWEl7o" ]; extraGroups = [ "wheel" diff --git a/system/accounts/users/custom/default.nix b/system/accounts/users/custom/default.nix index 486ed0e..89efb03 100644 --- a/system/accounts/users/custom/default.nix +++ b/system/accounts/users/custom/default.nix @@ -2,6 +2,6 @@ { imports = [ ./jules - ./jimbo + ./bun ]; } diff --git a/system/default.nix b/system/default.nix index 4a8f7b3..73ade52 100644 --- a/system/default.nix +++ b/system/default.nix @@ -11,7 +11,7 @@ ]; networking = { - hostName = "rubble"; + hostName = "progesterone"; hostId = "e0b1fcef"; }; diff --git a/system/devices/disks/disko/default.nix b/system/devices/disks/disko/default.nix index c6a65ae..8a347ae 100644 --- a/system/devices/disks/disko/default.nix +++ b/system/devices/disks/disko/default.nix @@ -21,17 +21,11 @@ mountOptions = [ "umask=0077" ]; }; }; - luks = { + main = { size = "100%"; content = { - type = "luks"; - name = "${config.networking.hostName}-disk"; - settings.allowDiscards = true; - passwordFile = "/tmp/secret.key"; - content = { - type = "lvm_pv"; - vg = "${config.networking.hostName}"; - }; + type = "lvm_pv"; + vg = "${config.networking.hostName}"; }; }; }; @@ -68,14 +62,13 @@ mountOptions = [ "compress=zstd" "noatime" "ssd" ]; }; "/persist/.snapshots" = { }; - "/persist/home/jules" = { }; "/persist/home/jules/.snapshots" = { }; }; }; }; swap = { - size = "4G"; + size = "2G"; content = { type = "swap"; discardPolicy = "both"; diff --git a/system/secrets/default.nix b/system/secrets/default.nix index 6f2918ef0a6fe069c1bf453727c7d3ac32e0cb76..a09c591fa56ff80bb70a35024dca3441fcd83a9c 100644 GIT binary patch literal 779 zcmV+m1N8g=M@dveQdv+`02WRzBx|s@t9__NqQGxf34g6x7~VW-AqBj27CUfH<3&n8 zS*7rotydr;8jv^2LU9|OH|XwSP%^%au~7wmGZFfA_)1_87D*_`gO609aQd87xhmT( zEF?BS1*Pv=nrx%VSBm_VB_$0E#40AgZPK!8{Io#gZ-ldz+{Cw<2iDWh>U$K)>2haJ zk4t_8`%U!nh8ejzUuP$?orD#w3c3%jA@QZ)1^zkLqz_aNM0(bPdgfd>Nu3D^JJG_~ zMjN7PIZL)^VJd?_UdL@pB=bVFPwVjooTe|WJSY-nCNp^~%YcM_mh}s~EUS0cWE<^x zyZJ=R$S2C+S9%<*HE&(Q5cy7!ArD2r#xu5RrJv#g+|5-~dt>x{Tqhq4jrB(xWyj=W_ zoK^*eE<)=Lf{jVVTC5QU+q7Pjz`$9@iSt&yueY8}kO% z#H=XK#n|BEZn0xJ6!&Ton9a`U&**7X2*Za2_JM;J*|{s)y8)NoLmwygd;K|y(Iggts^R0);bZAsnhl)SbDqulWl&CR zgX*!)WjBCd94?5rU;M@dveQdv+`0Kmms4`c|sivN}A%@UDBS1n9zt6lk9VP+C;9cU)X7EyGP zuC<4goS>gPem;CvVsvjC4uj+`)C?bhj)Olp9sNV9Dz}`$8l7GrQF-D9tk?{{S;Tbl z#%Mmk!8Y8``}%J)c|w(>t+Io(x{T-i6Zpvp;kTR;{V?B!Ykt_D8)_9M9?_=|m1IAm zNdm`~G!bVxw}SnvPQtgeX%ytv#nKqwFR56h_)>)D*Gr}kwq@iU>jiXe&Aw?J;Enp? z|L%%9$h3t=+d|o`^T_+wfkzZ(mXs%KIy1Vw0B$p#Rjf6B%7JgIBKEIGny5A1sX`uYBiV^D(H;>d^WVY&cG=J#v`q>_U zPE7yWuCZ%Xm}Z>Z_?j(Mw41IB)s0XNoABfpm~b#<*O&zy2K3V(vSKLW(D8Q%NP*M_ zqCxBQX(By0H^7tywv-O|zOg>t^SaC{7a-^EWO^q)#BQ&3IWD41J;af&?RR-~_3^4|B%!`)G>|Ls zl$KhuNqT~?yV}{csLbXlY$a2!}U{( L5I9j<&t(rGIPZqm