mirror of
https://github.com/TheWanderingCrow/CrOS.git
synced 2026-01-10 17:34:05 -05:00
Push nrxnukzvxrpt (#9)
* work on install documentation'
* get forgejo setup
* flake.lock: Update
Flake lock file updates:
• Updated input 'nix-secrets':
'git+ssh://git@github.com/TheWanderingCrow/nix-secrets?ref=refs/heads/master&rev=ee028b24d966663da48f4d1884ba84c3db779518' (2025-10-16)
→ 'git+ssh://git@github.com/TheWanderingCrow/nix-secrets?ref=refs/heads/master&rev=e83722f7ae8d1289579ed1d064176e57b294eb41' (2025-10-22)
This commit is contained in:
parent
8560beb505
commit
6f0cd412f1
3 changed files with 16 additions and 4 deletions
8
flake.lock
generated
8
flake.lock
generated
|
|
@ -333,11 +333,11 @@
|
|||
"nixpkgs": "nixpkgs_3"
|
||||
},
|
||||
"locked": {
|
||||
"lastModified": 1760644113,
|
||||
"narHash": "sha256-vQ/aSkyfHAaEqi38S86U1LVFwTqY8U3YQ1GPNwcPyAI=",
|
||||
"lastModified": 1761156521,
|
||||
"narHash": "sha256-+lGuJKTRHqpBDEE8xgkImYpCNR67BRtHbH5zNCE2uhg=",
|
||||
"ref": "refs/heads/master",
|
||||
"rev": "ee028b24d966663da48f4d1884ba84c3db779518",
|
||||
"revCount": 140,
|
||||
"rev": "e83722f7ae8d1289579ed1d064176e57b294eb41",
|
||||
"revCount": 141,
|
||||
"type": "git",
|
||||
"url": "ssh://git@github.com/TheWanderingCrow/nix-secrets"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -2,5 +2,9 @@
|
|||
services.forgejo = {
|
||||
enable = true;
|
||||
lfs.enable = true;
|
||||
database = {
|
||||
type = "sqlite3";
|
||||
createDatabase = true;
|
||||
};
|
||||
};
|
||||
}
|
||||
|
|
|
|||
|
|
@ -13,3 +13,11 @@ From this subdirectory directory, run `just iso` to generate the ISO file
|
|||
ethernet and SSH in using the installer key in order to setup SOPS, this
|
||||
section will be amended when we figure this out
|
||||
6. Connect new host to ethernet and SSH in
|
||||
7. Run `ssh-keyscan <host> | ssh-to-age` to get the age keys for the remote
|
||||
8. Place the public key into .sops.yaml in the secrets repo at keys.hosts.<host>
|
||||
9. Run `age-keygen` and place the public key in keys.users.<user>_<host>
|
||||
10. Create the <host>.yaml file in .sops.yaml and assign *skeleton, the host
|
||||
key, and the user key
|
||||
11. Run `just rekey` in the secrets repo and push, then run `just update-secret`
|
||||
in the primary repo and push.
|
||||
12. Rebuild the system and test for working sops, you can now login locally
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue