nixos-system-config/README.md

dotnix

Prerequisites

You need to prepare a couple things before installation due to the way secrets are managed.

Prepare secrets repo

1. Ensure all required dependencies are present.

nix-shell -p sops age git

2. Initialize your secrets repo. You can do this anywhere on your system except this repository.

mkdir secrets
cd secrets
git init

3. Create your gitignore. You want this to make sure that you do not accidentally push your private key.

echo "keys.txt" > .gitignore

4. Generate your private key.

age-keygen -o ./keys.txt

5. Create your sops configuration file.

cat <<EOF > .sops.yaml
keys:
  - &master $(age-keygen -y ./keys.txt)
creation_rules:
  - path_regex: .*\.(yaml|json|env|ini)$
    key_groups:
    - age:
      - *master
EOF

?. Update the submodule to use your secrets repository.

git submodule set-url -- secrets <ssh uri to your repository>