74 commits

Author	SHA1	Message	Date
Janne Heß	af29ac4d84	Prune old secrets generations ... Closes #128	2021-11-09 23:17:55 +01:00
Janne Heß	bac08f6919	Allow setting user passwords	2021-11-07 13:53:16 +01:00
Janne Heß	9683d128bd	Add support for restarting/reloading units	2021-11-07 12:37:57 +01:00
Jörg Thalheim	e0e57da497	fix documentation and assertions for age.keyFile	2021-09-30 21:10:08 +02:00
Janne Heß	4cebc08062	Fix age key generation and test it	2021-09-30 15:28:39 +02:00
Janne Heß	5db02f2939	Import age keyfile and ssh keys at the same time	2021-09-30 15:07:30 +02:00
Janne Heß	4568162629	Import age ssh keys by default	2021-09-24 12:09:53 +02:00
Janne Heß	44d91e885e	Add review suggestions	2021-09-24 12:09:53 +02:00
Janne Heß	db8fcb50a3	Add support for ssh-generated age keys	2021-09-24 12:09:52 +02:00
Janne Heß	b21c0ce3a8	Group gnupg and age in the module	2021-09-24 12:09:52 +02:00
Janne Heß	f5a2ba217b	Add age support	2021-09-24 12:09:52 +02:00
Jörg Thalheim	f3deaae52f	Merge branch 'master' into master-specialfs	2021-08-26 19:53:56 +01:00
Jörg Thalheim	ce5e734b26	sops-nix: fix build	2021-08-26 20:01:22 +02:00
0x4A6F	f89c1a5bf1	modules/sops: activation after specialfs ... * ensure mounted /run before running setup-secrets	2021-08-22 23:28:48 +02:00
Maximilian Bosch	df2d4bbbfc	modules/sops: fix manual ... * Since 0d957142b6 the manual doesn't build since `<name>` is interpreted by docbook as (unmatched) XML-tag. I decided to use `<xref linkend` as this provides proper linking to the referenced option. * Also, if the module is included on a machine where `sops` isn't used, but `documentation.nixos.includeAllModules = true;` is set, the module wouldn't evaluate because `config.sopsFile` is referenced in a `default`-tag. This is generally an issue since every change to this option would trigger a rebuild of the manual anyways. See also 94fd200305 for that.	2021-07-10 16:11:31 +02:00
Nick Cao	0d957142b6	add readonly option sopsFileHash	2021-07-04 14:01:37 +08:00
Maximilian Bosch	94fd200305	module: Don't set option-value as option-default ... When using `documentation.nixos.includeAllModules = true;`, I'd otherwise have to rebuild the manual on each change since I have my `defaultSopsFile` in a git-repo with all my other configs.	2021-03-28 22:58:13 +02:00
Naïm Favier	360bfd77ae	improve assertions	2021-03-06 12:34:48 +01:00
Jörg Thalheim	23fae8a8b1	fix cross compilation	2021-01-30 10:26:09 +01:00
Jörg Thalheim	ffc9c2c78c	module: add defaultSopsFormat option	2020-07-23 08:36:38 +01:00
Jörg Thalheim	b395301115	nixos: enable manifest validation	2020-07-19 19:21:28 +01:00
Jörg Thalheim	7bd84011ef	fix sops nixos module	2020-07-12 17:52:03 +01:00
Jörg Thalheim	b75e51c423	add tests + ssh key support	2020-07-12 13:50:55 +01:00
Jörg Thalheim	8ccd9ba269	first commit	2020-07-06 07:31:57 +01:00