Set up tinc for framework

This commit is contained in:
Natsu Kagami 2024-08-15 18:37:13 +02:00
parent 58a49a71a8
commit f4c514baa6
Signed by: nki
GPG key ID: 55A032EB38B49ADB
11 changed files with 94 additions and 12 deletions

View file

@ -17,6 +17,10 @@
./wireless.nix
];
# Sops
common.linux.sops.enable = true;
common.linux.sops.file = ./secrets.yaml;
# services.xserver.enable = true;
# services.xserver.displayManager.sddm.enable = true;
# services.xserver.displayManager.sddm.wayland.enable = true;
@ -77,6 +81,16 @@
security.pam.services.swaylock.fprintAuth = true;
security.pam.services.login.fprintAuth = true;
# tinc network
sops.secrets."tinc-private-key" = { };
services.my-tinc = {
enable = true;
hostName = "framework";
ed25519PrivateKey = config.sops.secrets."tinc-private-key".path;
bindPort = 6565;
};
# Secrets
# sops.defaultSopsFile = ./secrets.yaml;
# sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];