Prepare for hashicorp vault

This commit is contained in:
TheWanderingCrow 2024-09-21 18:29:48 -04:00
parent c5c1f57cfa
commit 7058185beb
7 changed files with 41 additions and 2 deletions

View file

@ -4,7 +4,6 @@
../../modules
];
i3.enable = true;
hyprland.enable = true;
packages.mudding.enable = true;
networking.hostName = "Parzival-Mobile";

View file

@ -0,0 +1,10 @@
{config, pkgs, ...}:{
imports = [
./hardware-configuration.nix
../../modules
];
networking.hostName = "WCE-Vault";
gui.enable = false;
programming.enable = false;
}

View file

@ -23,13 +23,16 @@
enable = lib.mkEnableOption "enable crow";
home.enable = lib.mkEnableOption "enable home configuration";
};
vault = {
enable = lib.mkEnableOption "enable vault";
};
};
};
config = {
system.stateVersion = "24.05";
time.timeZone = "America/New_York";
nix.settings.experimental-features = ["flakes" "nix-command"];
nix.settings.experimental-features = ["flakes" "nix-command"];
users = {
enable = lib.mkDefault true;
@ -37,6 +40,9 @@
enable = lib.mkDefault true;
home.enable = lib.mkDefault true;
};
vault = {
enable = lib.mkDefault false;
};
};
fonts.packages = with pkgs; [

View file

@ -1,6 +1,7 @@
{config, ...}: {
imports = [
./crow
./vault
];
config.home-manager = {

View file

@ -0,0 +1,5 @@
{lib, config, ...}: {
imports = [
./user.nix
];
}

View file

@ -0,0 +1,7 @@
{ lib, config, ...}: {
config.users.users.vault = lib.mkIf config.users.vault.enable {
isNormalUser = true;
initialPassword = "changeme";
extraGroups = [];
};
}

11
modules/vault/default.nix Normal file
View file

@ -0,0 +1,11 @@
{ inputs, pkgs, lib, config, ...}: {
options.vault.enable = lib.mkEnableOption "enables hashicorp vault services";
config = {
services.vault = lib.mkIf config.vault.enable {
enable = true;
address = "localhost:8200";
};
};
}