36 lines
1003 B
Nix
36 lines
1003 B
Nix
# Module: Laptop Secrets & Base Configuration
|
|
# Description: Secrets management (sops-nix) and keyboard layout
|
|
# Services: sops-nix
|
|
# Dependencies: sops-nix for secrets management
|
|
# Note: Other laptop features (gaming, virtualization, etc.) are in separate modules
|
|
|
|
{ customConfig, ... }:
|
|
|
|
let
|
|
userHome = "/home/${customConfig.username}";
|
|
in
|
|
{
|
|
sops.validateSopsFiles = false;
|
|
sops.age.keyFile = "${userHome}/.config/sops/age/keys.txt";
|
|
|
|
# WiFi networks configuration - entire network list encrypted
|
|
sops.secrets.wifi-networks = {
|
|
path = "/run/secrets/wifi-networks.conf";
|
|
sopsFile = ../../secrets/wifi-networks.yaml;
|
|
format = "yaml";
|
|
key = "wifi-networks";
|
|
owner = "wpa_supplicant";
|
|
group = "wpa_supplicant";
|
|
mode = "0400";
|
|
};
|
|
|
|
sops.secrets.zwift = {
|
|
path = "${userHome}/.config/zwift/config";
|
|
sopsFile = ../../secrets/zwift.yaml;
|
|
owner = customConfig.username;
|
|
group = "users";
|
|
mode = "0400";
|
|
};
|
|
|
|
services.xserver.xkb.layout = "fr";
|
|
} |