finn.markwitz
a00916864c
Proves the sops-nix pipeline end to end on mibook: encrypts a throwaway secret to the operator + mibook host keys, declares it in machines/mibook/secrets.nix, and verifies it decrypts to /run/secrets/placeholder (root:root, 0400) on nixos-rebuild switch. Also removes the dead `let secrets = config.sops.secrets;` binding from both environments.nix files — leftover from an earlier abandoned plan, never referenced.
25 lines
414 B
Nix
25 lines
414 B
Nix
# enabled profiles
|
|
_: {
|
|
my.profiles = {
|
|
kde-desktop.enable = true;
|
|
zsh.enable = true;
|
|
apps = {
|
|
desktop_apps = true;
|
|
dev_apps = true;
|
|
};
|
|
development.enable = true;
|
|
docker.enable = true;
|
|
claude-code.enable = true;
|
|
};
|
|
|
|
my.hardware = {
|
|
bluetooth.enable = true;
|
|
sound.enable = false;
|
|
nvidia.enable = false;
|
|
};
|
|
my.services = {
|
|
vpn.enable = true;
|
|
};
|
|
|
|
}
|