~kaction/config

a642e61042f8d8ff93a056b2a32a62692f701df1 — Dmitry Bogatov 2 months ago 96dade8
manifest: get rid of secrets

Secrets are now managed via "ask(1)", and are no longer present in Nix
store. As safety measure, old secrets were rotated.
5 files changed, 0 insertions(+), 3 deletions(-)

D manifest/.gitattributes
M manifest/default.nix
D manifest/secret/auth.sh
D manifest/secret/dbx.json
D manifest/secret/foo.txt
D manifest/.gitattributes => manifest/.gitattributes +0 -1
@@ 1,1 0,0 @@
secret/** filter=git-crypt diff=git-crypt

M manifest/default.nix => manifest/default.nix +0 -2
@@ 54,7 54,6 @@ let
          "/home/kaction/Mail/tmp" = user-mkdir;
          "/home/kaction/.config" = user-mkdir;
          "/home/kaction/.config/dbxcli" = user-mkdir;
          "/home/kaction/.config/dbxcli/auth.json" = symlink ./secret/dbx.json;
          "/home/kaction/.config/git/config" = symlink (substituteAll {
            src = ./user/git.conf;
            logp = writeScript "logp" ''


@@ 72,7 71,6 @@ let
          "/etc/group" = symlink "${auth}/group";
          "/etc/gshadow" = { action = "unlink"; };
          "/etc/hosts" = symlink' ./hosts;
          "/etc/profile.d/auth.sh" = symlink ./secret/auth.sh;
          "/etc/doas.conf" = symlink ./doas.conf;
          "/etc/nix/nix.conf" = symlink ./nix.conf;
          "/etc/nsswitch.conf" = symlink ./nsswitch.conf;

D manifest/secret/auth.sh => manifest/secret/auth.sh +0 -0
D manifest/secret/dbx.json => manifest/secret/dbx.json +0 -0
D manifest/secret/foo.txt => manifest/secret/foo.txt +0 -0