Move some network config to private.nix
HEAD masterMove networking.interfaces.ens3.ipv6.addresses
2 files changed, 8 insertions, 15 deletions
diff --git a/nix-conf/machines/edrahil/network-configuration.nix b/nix-conf/machines/edrahil/network-configuration.nix
index 4b85912..16df081 100644
--- a/nix-conf/machines/edrahil/network-configuration.nix
+++ b/nix-conf/machines/edrahil/network-configuration.nix
@@ -1,19 +1,12 @@
{ ... }:
{
- networking = {
- interfaces.ens3.ipv6.addresses = [
- {
- # Emulate nix-sops. Technically an anti-pattern, but IP addresses aren't real secrets, and this has to be embedded here,
- # as we cannot set a file path to read it from.
- # Populate/update with:
- # SOPS_AGE_KEY=$(doas ssh-to-age -private-key -i /etc/ssh/ssh_host_ed25519_key) sops -d --extract '["ipv6_address"]' machines/edrahil/secrets.yaml | doas tee /root/.config/secrets/ipv6_address
- address = builtins.readFile "/root/.config/secrets/ipv6_address";
- prefixLength = 64;
- }
- ];
- defaultGateway6 = {
- address = "fe80::1";
- interface = "ens3";
- };
+ imports = [
+ ./private.nix
+ ];
+
+ # networking.interfaces.ens3.ipv6.addresses configured in private.nix
+ networking.defaultGateway6 = {
+ address = "fe80::1";
+ interface = "ens3";
};
}
diff --git a/nix-conf/machines/edrahil/private.nix b/nix-conf/machines/edrahil/private.nix
new file mode 100644
index 0000000..c5941c6
--- /dev/null
+++ b/nix-conf/machines/edrahil/private.nix
Binary files differ |