+4 -1

justfile

Reviewed

··· 1 1 switch target: 2 2 - sudo SSH_AUTH_SOCK=$SSH_AUTH_SOCK nixos-rebuild switch --flake {{target}} --override-input berkeley-mono git+ssh://git@codeberg.org/seanaye/berkeley-mono 2 2 + sudo SSH_AUTH_SOCK=$SSH_AUTH_SOCK nixos-rebuild switch --flake {{ target }} --override-input berkeley-mono git+ssh://git@codeberg.org/seanaye/berkeley-mono 3 3 + 4 4 + boot target: 5 5 + sudo SSH_AUTH_SOCK=$SSH_AUTH_SOCK nixos-rebuild boot --flake {{ target }} --override-input berkeley-mono git+ssh://git@codeberg.org/seanaye/berkeley-mono 3 6 4 7 generate_vpn: 5 8 nix-shell -p mozwire --run "mozwire relay save -n 0 --killswitch"

+3

modules/sean.nix

Reviewed

··· 69 69 }; 70 70 }; 71 71 72 72 + age.secrets.aws-credentials.file = ../secrets/aws.age; 73 73 + 72 74 programs.awscli = { 73 75 enable = true; 74 76 settings = { ··· 84 86 SUDO_EDITOR = "hx"; 85 87 SSH_ASKPASS = "${pkgs.openssh-askpass}/libexec/gtk-ssh-askpass"; 86 88 SSH_ASKPASS_REQUIRE = "prefer"; 89 89 + AWS_SHARED_CREDENTIALS_FILE = config.age.secrets.aws-credentials.path; 87 90 }; 88 91 89 92 # Only point at the local 1Password agent when not inside an SSH

+1

secrets.nix

Reviewed

··· 14 14 { 15 15 "secrets/wifi.age".publicKeys = allUsers ++ allPis; 16 16 "secrets/wireguard.age".publicKeys = allUsers ++ [ mira ]; 17 17 + "secrets/aws.age".publicKeys = allUsers; 17 18 }

secrets/aws.age

Reviewed

This is a binary file and will not be displayed.