felschr/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(home-server): update clevis secret

Browse source
This commit is contained in:
Felix Schröter 2025-05-20 21:27:58 +02:00
parent 49e18d684f
commit f0c6687e4c
Signed by: felschr
GPG key ID: 671E39E6744C807D
2 changed files with 3 additions and 3 deletions
hosts/home-server
default.nix
secrets/clevis
home-server-enc.jwe

4
hosts/home-server/default.nix
View file

@ -145,9 +145,9 @@ in
authorizedKeys = config.users.users.felschr.openssh.authorizedKeys.keys;
};
};
boot.initrd.systemd.network.wait-online.enable = false;
boot.initrd.systemd.network.wait-online.anyInterface = true;
# allow automated decryption
# `echo -n '<LUKS passphrase here>' | clevis encrypt tang '{"url": "http://doctr:9090"}' > home-server-enc.jwe`
# `echo -n '<LUKS passphrase here>' | clevis encrypt tang '{"url": "http://doctr.local:9090"}' > home-server-enc.jwe`
boot.initrd.clevis.enable = true;
boot.initrd.clevis.useTang = true;
boot.initrd.clevis.devices."enc".secretFile = ../../secrets/clevis/home-server-enc.jwe;

2
secrets/clevis/home-server-enc.jwe
View file

@ -1 +1 @@
eyJhbGciOiJFQ0RILUVTIiwiY2xldmlzIjp7InBpbiI6InRhbmciLCJ0YW5nIjp7ImFkdiI6eyJrZXlzIjpbeyJhbGciOiJFUzUxMiIsImNydiI6IlAtNTIxIiwia2V5X29wcyI6WyJ2ZXJpZnkiXSwia3R5IjoiRUMiLCJ4IjoiQUtISFFSNjhkaFMxNGNiYXJJVkIxRFZPQkdaWEExY25OVHRSdHBkd1FVZ09LS2RNQnczM09wbk9zZGxOUmNFSDdRVHpRbTdHdDRuWFc1LTFCZU1pUkhBOCIsInkiOiJBQ1NoTmd6c0I1SnVCYWh3MGpacXlWZG0zT0h1TW44VXVCQ1hiYjdVUkQxZzlTQTF4a2dhb2lBMlpQZWxmVVJTYXF0c1VTWi1CaERNaVYwSlpBaF92LVBQIn0seyJhbGciOiJFQ01SIiwiY3J2IjoiUC01MjEiLCJrZXlfb3BzIjpbImRlcml2ZUtleSJdLCJrdHkiOiJFQyIsIngiOiJBQUV4MVB2d19qbmVfZDBUS3F3djZtWEY3Rm5yYl94bnVHTmRwOUVNZU1rVXItQXdBaW1CTE42MktJajBIcjlnVnZFZmUyZ2NJYzhLV1FCam90djdDYWw1IiwieSI6IkFXa2kwU1ZIcjRmRmFEODFkRVRQd0U0U1htZVJOeWl4WXlBOVNiWFpKSWhZRUM3YTVfZUliTk5xby1LX0paNzNEX20xVVdYdVY0bVAzVmxLc3N4bGZFTFEifV19LCJ1cmwiOiJodHRwOi8vZG9jdHI6OTA5MCJ9fSwiZW5jIjoiQTI1NkdDTSIsImVwayI6eyJjcnYiOiJQLTUyMSIsImt0eSI6IkVDIiwieCI6IkFEbTFxOEpJUEtOUVZnYnM0dTI0emxHRWNTME9TZWFjX1BEWnVUZFR6Y1VXa2d6SXJWZUlIWTlDRDIxR2NPYzBNSU1zeExzZkd3MWtYRnhFT0ZKb0dqYjIiLCJ5IjoiQVdSTkY1OXpjdmtfUFNOdUsxaXlrUTQ3aUptVUxqNWQzSWhnQTYwNkZMZ3lBRHJEemRRUFVFdDdLYUU3YmYtYVpjOXlSZUszcUFOeE9aM2xvZjZUdGxDMiJ9LCJraWQiOiJ1cGZSMUxlN19IbzE0c0RGTGVUYmZveml5Nmxnb0NDdm1KT1ZiMXVfbjVzIn0..joZ7BnztS81hEZ9v.PX-I51YQ8lvSmuSSnmcDYuYAAktzAU12sz7JVK9h9O8YUmvWxZC5wQ.TDmD4B4L7g6vRy5LHqM5VQ
eyJhbGciOiJFQ0RILUVTIiwiY2xldmlzIjp7InBpbiI6InRhbmciLCJ0YW5nIjp7ImFkdiI6eyJrZXlzIjpbeyJhbGciOiJFUzUxMiIsImNydiI6IlAtNTIxIiwia2V5X29wcyI6WyJ2ZXJpZnkiXSwia3R5IjoiRUMiLCJ4IjoiQUtISFFSNjhkaFMxNGNiYXJJVkIxRFZPQkdaWEExY25OVHRSdHBkd1FVZ09LS2RNQnczM09wbk9zZGxOUmNFSDdRVHpRbTdHdDRuWFc1LTFCZU1pUkhBOCIsInkiOiJBQ1NoTmd6c0I1SnVCYWh3MGpacXlWZG0zT0h1TW44VXVCQ1hiYjdVUkQxZzlTQTF4a2dhb2lBMlpQZWxmVVJTYXF0c1VTWi1CaERNaVYwSlpBaF92LVBQIn0seyJhbGciOiJFUzUxMiIsImNydiI6IlAtNTIxIiwia2V5X29wcyI6WyJ2ZXJpZnkiXSwia3R5IjoiRUMiLCJ4IjoiQUlBTmxsV3ltRmdUMUE4OVItOVkzUUMxRmdtVS1ORWQ4Ui1zTzVtMExoZkd3MHVpaER5anFtNVVsMVYwdkY5UHpYN2xLVlctRU1Uc0ZRVGlOamxkT1VpWiIsInkiOiJBUDl1ZzdNcWZpR21vRXZxaXU2N3VhUUtNcHU0Vy1wSnR5bXRZZ1BVcklZdFIyb1ZzTnA1OXBxTl9nZ21WYTFYYnVFZG1GMTRBNjFzNHJSRkl2UkpOT1VjIn0seyJhbGciOiJFQ01SIiwiY3J2IjoiUC01MjEiLCJrZXlfb3BzIjpbImRlcml2ZUtleSJdLCJrdHkiOiJFQyIsIngiOiJBQUV4MVB2d19qbmVfZDBUS3F3djZtWEY3Rm5yYl94bnVHTmRwOUVNZU1rVXItQXdBaW1CTE42MktJajBIcjlnVnZFZmUyZ2NJYzhLV1FCam90djdDYWw1IiwieSI6IkFXa2kwU1ZIcjRmRmFEODFkRVRQd0U0U1htZVJOeWl4WXlBOVNiWFpKSWhZRUM3YTVfZUliTk5xby1LX0paNzNEX20xVVdYdVY0bVAzVmxLc3N4bGZFTFEifSx7ImFsZyI6IkVDTVIiLCJjcnYiOiJQLTUyMSIsImtleV9vcHMiOlsiZGVyaXZlS2V5Il0sImt0eSI6IkVDIiwieCI6IkFiVHNYelFZdk5LWlZZUmlrRjRncUxQVXdMZmVEUUpmNUpBYkprVmdMc0o1RFR1WUJwN01oR1hkMEdxNFNSQ2ZMckZhdmpRcHU2RmRUS1B1MDNHbnRvYm0iLCJ5IjoiQUx4aUVVY043T0pfVDloOG03bS1XejU2ZnQzNUJKWUsyVHhNNU9qWXowRV9WOFNUa0RrR2VtcXdaUElYcDVhWEpGZHhNVk1TQUJ1dUlPYVJ4WUJ5dndjUiJ9XX0sInVybCI6Imh0dHA6Ly9kb2N0ci5sb2NhbDo5MDkwIn19LCJlbmMiOiJBMjU2R0NNIiwiZXBrIjp7ImNydiI6IlAtNTIxIiwia3R5IjoiRUMiLCJ4IjoiQVRpX3p5T3hUTVBLemE1RldNOXY2ckEtbjRRTjluRzlIWWQ5dENvaTE4Z1ZhTVdwdjdPQkMwSGRzSnF0ZTk1aFRaaU5EM3JHSG5BN0I0QUItYXllYW84RCIsInkiOiJBWFNfMkpfSncyQnRrN0x1eTBIUEUxLUJkbkg2N1hDUWZCTXN6MVBjTnhUQVJqQlNYYXNaTE9RYjBxQmRsUVRTQTFWcURwNlBxVUpUMDF1bWpqS1BtRkk1In0sImtpZCI6InVwZlIxTGU3X0hvMTRzREZMZVRiZm96aXk2bGdvQ0N2bUpPVmIxdV9uNXMifQ..dqchLVn3Obu4qNh5.KXzhPXJasizuRDl7USs2FGMauT659KjusszKuAwGMSgoEoFFh5J3Eg.1X1pEXtekWbCwUnQvdcAzQ