asxpi/nixOS
asxpi/nixOS
1
0
Fork 0
Code Issues Pull requests Activity

sops: introduce sops-nix (age), ssh keys from encrypted tarball, .example secrets

Browse source
This commit is contained in:
Sergei Poljanski 2026-07-14 12:24:21 +04:00
commit a7ec82579c
Signed by: asxpi
GPG key ID: 4F8851660FA4121B
9 changed files with 149 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

14
secrets/network.yaml.example Normal file
View file

@ -0,0 +1,14 @@
# Encrypt with: sops -e -i secrets/network.yaml
# xray-endpoint: xray server IP (spliced into sing-box route rules at runtime)
# route-exclude: JSON array of CIDRs excluded from the TUN (sing-box quote=false splice)
# ssh-hosts: ssh_config fragment, pulled in via Include /run/secrets/ssh-hosts
xray-endpoint: 203.0.113.1
route-exclude: '["203.0.113.1/32","198.51.100.7/32","10.20.0.0/24","fd69:69:69::/64"]'
ssh-hosts: |
Host jump
HostName 10.20.0.10
AddressFamily inet
Host myserver.example.com myserver
HostName myserver.example.com
ProxyJump jump