HotaruBlaze/nixos-at-home
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: enable docker-host-incus on blade

Browse Source
This commit is contained in:
Hermes-Neo
2026-06-28 18:57:11 +01:00
parent b8e2f44891
commit d943c48346
1 changed files with 1 additions and 35 deletions
Download Patch File Download Diff File Expand all files Collapse all files

36
hosts/blade/default.nix
View File

@@ -1,35 +1 @@
{ pkgs, ... }: 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
{
imports = [
./hardware-configuration.nix
./networking.nix
./users.nix
./power-plan.nix
../../modules/common/incus.nix
];
networking.interfaces.eth0.wakeOnLan.enable = true;
# ── NetBird zero-trust VPN ─────────────────────────────────
services.netbird = {
enable = true;
login = {
enable = true;
setupKeyFile = "/run/secrets/netbird-setup-key";
};
};
# Decrypt the NetBird setup key from SOPS secrets before netbird starts
system.activationScripts.netbird-setup-key = {
text = ''
mkdir -p /run/secrets
${pkgs.sops}/bin/sops \
--decrypt \
--extract '["netbird_setup_key"]' \
${./secrets.yaml} \
> /run/secrets/netbird-setup-key
chmod 600 /run/secrets/netbird-setup-key
'';
deps = [ "etc" ];
};
}