diff --git a/hosts/g3/secrets.yaml b/hosts/g3/secrets.yaml new file mode 100644 index 0000000..02886b9 --- /dev/null +++ b/hosts/g3/secrets.yaml @@ -0,0 +1,32 @@ +telegraf: ENC[AES256_GCM,data:i5XK79gyjKgHvyeBooB7i7pQoMdyVGfNiDbLuvwREwpjJTO9PXarqZIUleFcNMHhTREJiQOqVJvUYMfypi0i9QiUrLFi4fp0aJsR5uU1ruz5srKgHXyCpCLif1FPm6otFoy1voLTLa3QXHN6v3uFDUMXdutDEEe3r9ThCML2rC3IqmwqjnzU+eTHR7QeTR64,iv:Q3w5E/UtK0hzX6c+UxT9dZAs9lY3B1d1fbKIgCDCULQ=,tag:WS151o9WtHibPrvbE0+bag==,type:str] +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: + - recipient: age1gfyfc6tqphyw64ygg4w8sj73pqzycfsc4ptwyhau0sk4q3ffqprqwxexsy + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxaThIdmFiZExTeTRYSEEv + dVFNaWlIYWpUN3RUNExsN0d3VFY0KzRzMTJvCkhnaCtBRU5RdVBJSC9UaGZad28r + anRRQnhrWndETm5KWVU0SDJ1ZUVKZTgKLS0tIDBPbDRKMzJybUpsQ0tKdy9aYVhK + cnpJcWhBTThYTVZkWUpYYytlSWUwYkUKr5D6gseygCm4JSNy9lp45d24PcM6FbDG + RJD1grIkl8nZ70xj8jmDwgr56zV23/zMkWWVDDb8+I5lDuVlFWv4jg== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2024-06-14T09:17:04Z" + mac: ENC[AES256_GCM,data:sb+sgsVqb5pBThMvx7LXeyxU1tYmjnzWMUNlHv78z9NZETSKvY6HIIhT2OnpB22GkKqZ4Jpn8qSOWF9nsNhQf749tnkACEK092pWfKNPQ/xscaTJoxeRSns6CZ2yacU7AzG/IS9UKc09cJUwq0Hujz4czNnTrzK7dTawLzHZFFc=,iv:tLpoA40B0pk6n/D9qnsKs8j6Ql0ZSqs30h8nhh+VXOc=,tag:a2ttdFElb0jTzi9XPWiUhw==,type:str] + pgp: + - created_at: "2024-06-14T09:16:33Z" + enc: |- + -----BEGIN PGP MESSAGE----- + + hF4DLBF4i730Eg8SAQdAjoLG8XJ49iBHSr3bCcS7H2TLBIIcL6hr8YNHGBWJ0wkw + lWVWJ7+JwD/CiXBnuMaGY39ARzLlOYSVI75yuEETX6FpkU88Qt3BVXOY+W5RJcUs + 0l4BmvKrx8rVIFawWzijNdvhw1wh4LanLTgEe15m/yoRsD2umSifrriY78Mw/Vkd + LS8zH6TA6EyCwYSpR80UXlxxTcUOfXEK/ip4084hQoW+aq14rlI2nE+LXhhJX9Tc + =EB0p + -----END PGP MESSAGE----- + fp: 3E241558655D7FE06C6711A5A5D6250D1806CAA8 + unencrypted_suffix: _unencrypted + version: 3.8.1 diff --git a/hosts/modules/nasp.nix b/hosts/modules/nasp.nix index 3517712..fb7ec79 100644 --- a/hosts/modules/nasp.nix +++ b/hosts/modules/nasp.nix @@ -248,7 +248,7 @@ in ## mkdir -p ~/.config/sops/age ## nix-shell -p ssh-to-age --run "ssh-to-age -private-key -i /etc/ssh/ssh_host_ed25519_key > ~/.config/sops/age/keys.txt" (lib.mkIf sopsCfg.enable { - sops.defaultSopsFile = ../${mainCfg.hostName}/secrets.yaml; + sops.defaultSopsFile = ../${config.networking.hostName}/secrets.yaml; sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ]; }) # telegraf @@ -267,7 +267,7 @@ in flush_interval = "30s"; flush_jitter = "3s"; precision = "0s"; - hostname = assert (mainCfg.netName != ""); mainCfg.netName; + hostname = assert (config.networking.hostName != ""); config.networking.hostName; omit_hostname = false; }; outputs.influxdb_v2 = { @@ -291,6 +291,10 @@ in fieldpass = [ "used" "total" "bucket"]; interval = "30s"; }; + inputs.temp = { + name_override = "temperture"; + tags = { bucket = "device"; }; + }; }; }; }) @@ -392,6 +396,10 @@ in tags = { bucket = "device"; }; }; }; + services.ntp = { + enable = true; + servers = [ "192.168.16.118" ]; + }; })) ]); }