diff options
Diffstat (limited to '')
-rw-r--r-- | README.org | 33 |
1 files changed, 0 insertions, 33 deletions
diff --git a/README.org b/README.org deleted file mode 100644 index 5e6b6a3..0000000 --- a/README.org +++ /dev/null @@ -1,33 +0,0 @@ -Tools, scripts, and configurations for my machines. - -* Secret management with =agenix= -We use =agenix= to manipulate our secrets. -** Create a new secret -To create a new secret: -#+begin_src sh -cd ../secrets -agenix -e <name of the secret>.age -#+end_src -** Manage the secrets -In [[file+sys:../secrets/secrets.nix][secrets.nix]] you need to add the secret and who need to have access to it. - -In the configuration for one of the host, you'll then need to add: -#+begin_src nix -age.secrets.restic = { - file = ../../../secrets/restic-backups.age; - owner = "root"; - group = "root"; - path = "/etc/restic/secret"; - mode = "600"; -}; -#+end_src -** Edit secrets -This is the easiest command to work with 1password: -#+begin_src sh -agenix -e restic-backups.age -i (op read "op://Personal/nixos/private key?ssh-format=openssh"|psub) -#+end_src -* Services -** ddns-updater -This service runs on =vm-synology=. - -There's a web UI accessible at http://vm-synology:8000 to check the status of the updates. |