Prepare for hashicorp vault

This commit is contained in:
TheWanderingCrow 2024-09-21 18:29:48 -04:00
parent c5c1f57cfa
commit 7058185beb
7 changed files with 41 additions and 2 deletions

View file

@ -23,13 +23,16 @@
enable = lib.mkEnableOption "enable crow";
home.enable = lib.mkEnableOption "enable home configuration";
};
vault = {
enable = lib.mkEnableOption "enable vault";
};
};
};
config = {
system.stateVersion = "24.05";
time.timeZone = "America/New_York";
nix.settings.experimental-features = ["flakes" "nix-command"];
nix.settings.experimental-features = ["flakes" "nix-command"];
users = {
enable = lib.mkDefault true;
@ -37,6 +40,9 @@
enable = lib.mkDefault true;
home.enable = lib.mkDefault true;
};
vault = {
enable = lib.mkDefault false;
};
};
fonts.packages = with pkgs; [

View file

@ -1,6 +1,7 @@
{config, ...}: {
imports = [
./crow
./vault
];
config.home-manager = {

View file

@ -0,0 +1,5 @@
{lib, config, ...}: {
imports = [
./user.nix
];
}

View file

@ -0,0 +1,7 @@
{ lib, config, ...}: {
config.users.users.vault = lib.mkIf config.users.vault.enable {
isNormalUser = true;
initialPassword = "changeme";
extraGroups = [];
};
}

11
modules/vault/default.nix Normal file
View file

@ -0,0 +1,11 @@
{ inputs, pkgs, lib, config, ...}: {
options.vault.enable = lib.mkEnableOption "enables hashicorp vault services";
config = {
services.vault = lib.mkIf config.vault.enable {
enable = true;
address = "localhost:8200";
};
};
}