default.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27

{ sources ? import ./npins
, pkgs ? import sources.nixpkgs {}
}:
with (import ./lib { inherit sources pkgs; });
eval {
  machines.bob.imports = [
    ({ config, pkgs, self, ... }: {
      imports = [
        "${sources.nixpkgs}/nixos/modules/testing/hardcodedSecret.nix"
        ./modules/userSecret.nix
        self.config.outputs.nixosModules.asecret
      ];
      networking.hostName = "bob";

     testing.hardcodedSecret.rootPassword = {
       secret.consumer = config.users.users.root.passwordSecret;
       content = pkgs.asecret-lib.hashedPassword "rootPassword";
     };

     users.users.root.passwordSecret.provider =
       config.testing.hardcodedSecret.rootPassword.secret;
    })
  ];
  machines.alice = {
    networking.hostName = "alice";
  };
}