seanaye.bsky.social / nixos-config
me like nix
0
Fork 0

Configure Feed

Select the types of activity you want to include in your feed.

agenix vpn config

author
Sean Aye date (Mar 22, 2026, 8:03 PM -0400) commit 5dbc8e67 parent 81f281f1 change-id zyykwpxk
+9 -1
+1
.gitignore
··· 1 1 result 2 2 secrets/pi_host_key 3 + *.conf
+1
flake.nix
··· 59 59 # Your main configuration file 60 60 ./hosts/mira/configuration.nix 61 61 catppuccin.nixosModules.catppuccin 62 + agenix.nixosModules.default 62 63 63 64 copyparty.nixosModules.default 64 65
+3 -1
hosts/mira/configuration.nix
··· 120 120 121 121 # List services that you want to enable: 122 122 services.flaresolverr.enable = true; 123 + age.secrets.wireguard.file = ../../secrets/wireguard.age; 124 + 123 125 nixarr = { 124 126 enable = true; 125 127 mediaDir = "/mnt/storage1/nixarr/media"; 126 128 vpn = { 127 129 enable = true; 128 - wgConf = "/mnt/storage1/nixarr/wireguard.conf"; 130 + wgConf = config.age.secrets.wireguard.path; 129 131 }; 130 132 131 133 jellyfin = {
+2
justfile
··· 1 + generate_vpn: 2 + nix-shell -p mozwire --run "mozwire relay save -n 0 --killswitch"
+2
secrets.nix
··· 6 6 # Host keys (for decrypting at boot) 7 7 # Shared key for all Pi devices 8 8 pi = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIACsAOLqT+aePFhKDQNXa4m+fikA+Aaig26YUa+WZFNz"; 9 + mira = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKOL+utPku8c0/QAuyIDZ75cvMI8NGi/g+Qc2wvO2px5"; 9 10 10 11 allUsers = [ sean ]; 11 12 allPis = [ pi ]; 12 13 in 13 14 { 14 15 "secrets/wifi.age".publicKeys = allUsers ++ allPis; 16 + "secrets/wireguard.age".publicKeys = allUsers ++ [ mira ]; 15 17 }
secrets/wireguard.age

This is a binary file and will not be displayed.