more updating + fix smb secrets

This commit is contained in:
xunuwu 2024-10-27 14:44:58 +01:00
parent 0938d3d1dc
commit 9b760cafc1
Signed by: xun
SSH key fingerprint: SHA256:Uot/1WoAjWAeqLOHA5vYy4phhVydsH7jCPmBjaPZfgI
6 changed files with 17 additions and 13 deletions

View file

@ -10,18 +10,18 @@ creation_rules:
key_groups: key_groups:
- age: - age:
- *xun - *xun
- path_regex: profiles/secrets/global - path_regex: systemProfiles/secrets/global
key_groups: key_groups:
- age: - age:
- *xun - *xun
- *nixdesk - *nixdesk
- *hopper - *hopper
- path_regex: profiles/secrets/nixdesk - path_regex: systemProfiles/secrets/nixdesk
key_groups: key_groups:
- age: - age:
- *xun - *xun
- *nixdesk - *nixdesk
- path_regex: profiles/secrets/hopper - path_regex: systemProfiles/secrets/hopper
key_groups: key_groups:
- age: - age:
- *xun - *xun

View file

@ -1,2 +0,0 @@
[config]
"hosts/nixdesk/smbcreds" = ["ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKqW5ZkBV2XCdF/ZhwC1DOfrgiLxCC2ym6BO7miHi05M xun@nixdesk"]

View file

@ -109,7 +109,7 @@ in {
# programs.gamemode # TEMP: TODO # programs.gamemode # TEMP: TODO
# programs.gamescope # TEMP: TODO # programs.gamescope # TEMP: TODO
# programs.steam # TEMP: TODO # programs.steam # TEMP: TODO
programs.RE.default # programs.RE.default
]) ])
{ {

View file

@ -25,6 +25,7 @@
builtins.elem (lib.getName pkg) [ builtins.elem (lib.getName pkg) [
"steam" "steam"
"steam-original" "steam-original"
"steam-unwrapped"
"apple_cursor" # bwuh this is NOT unfree!! "apple_cursor" # bwuh this is NOT unfree!!
]; ];
}; };

View file

@ -1,32 +1,37 @@
{config, ...}: { {
config,
pkgs,
...
}: {
environment.systemPackages = [pkgs.cifs-utils];
systemd.mounts = [ systemd.mounts = [
{ {
description = "smb hopper transmission download directory"; description = "smb hopper transmission download directory";
what = "//192.168.50.97/transmission"; # hopper local ip what = "//192.168.50.97/transmission"; # hopper local ip
where = "/server/transmission"; where = "/server/transmission";
type = "cifs"; type = "cifs";
options = builtins.readFile ./smbcreds; options = "uid=xun,gid=users,credentials=${config.sops.secrets.samba.path}";
} }
{ {
description = "smb hopper vault"; description = "smb hopper vault";
what = "//192.168.50.97/vault"; # hopper local ip what = "//192.168.50.97/vault"; # hopper local ip
where = "/server/vault"; where = "/server/vault";
type = "cifs"; type = "cifs";
options = "uid=xun,gid=users," + (builtins.readFile ./smbcreds); options = "uid=xun,gid=users,credentials=${config.sops.secrets.samba.path}";
} }
{ {
description = "smb hopper library"; description = "smb hopper library";
what = "//192.168.50.97/library"; # hopper local ip what = "//192.168.50.97/library"; # hopper local ip
where = "/server/library"; where = "/server/library";
type = "cifs"; type = "cifs";
options = "uid=xun,gid=users," + (builtins.readFile ./smbcreds); options = "uid=xun,gid=users,credentials=${config.sops.secrets.samba.path},vers=3.0";
} }
{ {
description = "smb hopper slskd files"; description = "smb hopper slskd files";
what = "//192.168.50.97/slskd"; # hopper local ip what = "//192.168.50.97/slskd"; # hopper local ip
where = "/server/slskd"; where = "/server/slskd";
type = "cifs"; type = "cifs";
options = "uid=xun,gid=users," + (builtins.readFile ./smbcreds); options = "uid=xun,gid=users,credentials=${config.sops.secrets.samba.path}";
} }
]; ];

View file

@ -1,11 +1,11 @@
{ {
steamPackages, steam-fhsenv-without-steam,
symlinkJoin, symlinkJoin,
}: }:
symlinkJoin { symlinkJoin {
name = "gamesand"; name = "gamesand";
paths = [ paths = [
(steamPackages.steam-fhsenv-without-steam.override (steam-fhsenv-without-steam.override
{ {
extraBwrapArgs = [ extraBwrapArgs = [
"--ro-bind ./files /game/files" "--ro-bind ./files /game/files"