From 36195dee41d7e3574a146c4aead521d46e67c416 Mon Sep 17 00:00:00 2001
From: baduhai <baduhai@pm.me>
Date: Tue, 20 Dec 2022 12:14:07 -0300
Subject: [PATCH] Testing agenix

---
 flake.nix             |  25 +++++++++++++++----------
 hosts/desktops/io.nix |   2 ++
 secrets/secret1.age   | Bin 0 -> 489 bytes
 secrets/secrets.nix   |  10 ++++++++++
 4 files changed, 27 insertions(+), 10 deletions(-)
 create mode 100644 secrets/secret1.age
 create mode 100644 secrets/secrets.nix

diff --git a/flake.nix b/flake.nix
index 6563945..51e4c5e 100644
--- a/flake.nix
+++ b/flake.nix
@@ -3,33 +3,37 @@
 
   inputs = {
     nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";
-
-    nur.url = "github:nix-community/nur";
+    nixpkgs-stable.url = "github:nixos/nixpkgs/nixos-22.11";
 
     home-manager = {
       url = "github:nix-community/home-manager/master";
       inputs.nixpkgs.follows = "nixpkgs";
     };
 
-    kmonad = {
-      url = "github:kmonad/kmonad?dir=nix";
-      inputs.nixpkgs.follows = "nixpkgs";
-    };
-
-    nixpkgs-stable.url = "github:nixos/nixpkgs/nixos-22.11";
-
     home-manager-stable = {
       url = "github:nix-community/home-manager/release-22.11";
       inputs.nixpkgs.follows = "nixpkgs-stable";
     };
 
+    nur.url = "github:nix-community/nur";
+
+    kmonad = {
+      url = "github:kmonad/kmonad?dir=nix";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+
     deploy-rs = {
       url = "github:serokell/deploy-rs";
       inputs.nixpkgs.follows = "nixpkgs";
     };
+
+    agenix = {
+      url = "github:ryantm/agenix";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
   };
 
-  outputs = inputs @ { self, nixpkgs, home-manager, nur, kmonad, nixpkgs-stable, home-manager-stable, deploy-rs, ... }: {
+  outputs = inputs @ { self, nixpkgs, home-manager, nur, kmonad, nixpkgs-stable, home-manager-stable, deploy-rs, agenix, ... }: {
     nixosConfigurations = {
       io = nixpkgs.lib.nixosSystem {
         system = "x86_64-linux";
@@ -37,6 +41,7 @@
         modules = [
           ./hosts/desktops/io.nix
           kmonad.nixosModules.default
+          agenix.nixosModule
           home-manager.nixosModules.home-manager
           {
             nixpkgs.overlays = [ nur.overlay ];
diff --git a/hosts/desktops/io.nix b/hosts/desktops/io.nix
index 3dea7b1..f51e2d5 100644
--- a/hosts/desktops/io.nix
+++ b/hosts/desktops/io.nix
@@ -10,6 +10,8 @@
     ./io
   ];
 
+  age.secrets.secret1.file = ../secrets/secret1.age;
+
   networking.hostName = "io";
 
   zramSwap = {
diff --git a/secrets/secret1.age b/secrets/secret1.age
new file mode 100644
index 0000000000000000000000000000000000000000..cf6213ed938c2e1b968dada64774aef382c842f4
GIT binary patch
literal 489
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCR+4zNr!b5zK74NLaW
zPAm(KEC?)hEzT@0Np~tV%yn_IEO9MLO!Q51HH^qFGITO^bL6Th49zXfad%Agtgtk6
zOb*IO%quq3&&rA_4)%0Q%PP$=j7*HuHgfcE3I*9#QIzRxo1>dvl$uzas$gB9pq*>s
z;isHt%ViX06j4wW>Yn1978sBc;i#SM7*LU0Q4(yK>1LeHrK_u}P*P~_;*u2@l2Tll
zk)NI8Z<?NMSx}LjR_;>il4@93X6fdU6{4S#l^apcl^(OEl;x#WAiwea50kR;xf0$~
zK6v#k`?Pai8naBEPhBdXL&&wnq_(2y!;|&g`%}e!-}&$VZN^rMmt5PsFTRgGlC<-b
z^&;^lFWRLUu1xrx{r=gWq9VntZTVc;g-u%@#8=2oTeN(+@wMlg%ipNA#<Ofm^<EJz
zT$&nsslu68e%4X9u$tnharypow<IE&{tI1*{~!2$&C9u~rBA+^Jh6l`LrLnpjegbI
zxQj;rZ+y}c)mLDV4i5VGf0gm)Afr9y4(neQ`d@tbfAyj%rt9~pf2vTC_g+{inI$dS
n*m`m0T1AO-`pt4WYi~_#uit8VY|pbqQ=|56ch=Ru4QBuVf0D?$

literal 0
HcmV?d00001

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
new file mode 100644
index 0000000..cee744e
--- /dev/null
+++ b/secrets/secrets.nix
@@ -0,0 +1,10 @@
+let
+  io = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKCIrKJk5zWzWEHvLMPMK8T3PyeBjsCsqzxPN+OrXfhA";
+  desktops = [ io ];
+  
+  alexandria = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK95QueW+jp1ZmF299Xr3XkgHJ6dL7aZVsfWxqbOKVKA";
+  servers = [ alexandria ];
+in
+{
+  "secret1.age".publicKeys = desktops;
+}