https://github.com/imax153/nixos
My personal NixOS configurations
https://github.com/imax153/nixos
Last synced: 8 months ago
JSON representation
My personal NixOS configurations
- Host: GitHub
- URL: https://github.com/imax153/nixos
- Owner: IMax153
- Created: 2023-02-15T05:08:16.000Z (over 2 years ago)
- Default Branch: main
- Last Pushed: 2024-11-19T11:06:18.000Z (12 months ago)
- Last Synced: 2025-03-01T18:39:59.332Z (8 months ago)
- Language: Nix
- Size: 88.9 KB
- Stars: 1
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Nix Configuration
## Secret Management
This project makes use of [Mozilla SOPS (Secrets OPerationS)](https://github.com/mozilla/sops)
The [`.sops.yaml`](./.sops.yaml) file at the root of the repository defines creation rules for secrets to be encrypted with `sops`. Any files matching the defined creation rule paths will be encrypted with the specified public keys.
### Updating Secrets
To update secret files after making changes to the `.sops.yaml` file, run the snippet below:
```bash
find . -regex $(yq -r '[.creation_rules[] | "./" + .path_regex] | join("\\|")' "$(pwd)/.sops.yaml") | \
xargs -i sops updatekeys -y {}
```