From 56a120d0f189f65cfbd700125176fbe34b9e3a0c Mon Sep 17 00:00:00 2001
From: stupidcomputer <ryan@beepboop.systems>
Date: Tue, 31 Dec 2024 12:24:03 -0600
Subject: [PATCH] add localnet wifi connection to age secrets

---
 boxes/aristotle/agenix.nix     |  12 ++++++++++++
 boxes/aristotle/default.nix    |   1 +
 secrets/nm-home-net-config.age | Bin 0 -> 694 bytes
 secrets/secrets.nix            |   3 +++
 4 files changed, 16 insertions(+)
 create mode 100644 boxes/aristotle/agenix.nix
 create mode 100644 secrets/nm-home-net-config.age

diff --git a/boxes/aristotle/agenix.nix b/boxes/aristotle/agenix.nix
new file mode 100644
index 0000000..c8eeb2b
--- /dev/null
+++ b/boxes/aristotle/agenix.nix
@@ -0,0 +1,12 @@
+{ machines, ... }:
+{
+  age = {
+    secrets = {
+      nm-home-net-config = {
+        file = ../../secrets/nm-home-net-config.age;
+        path = "/etc/NetworkManager/system-connections/main.nmconnection";
+      };
+    };
+    identityPaths = [ "/home/usr/.ssh/id_ed25519" ];
+  };
+}
diff --git a/boxes/aristotle/default.nix b/boxes/aristotle/default.nix
index 47a853b..8d34ddf 100644
--- a/boxes/aristotle/default.nix
+++ b/boxes/aristotle/default.nix
@@ -4,6 +4,7 @@
   imports = [
     ../../lappy-config
     ./paperless.nix
+    ./agenix.nix
     ./hardware-configuration.nix
   ];
 
diff --git a/secrets/nm-home-net-config.age b/secrets/nm-home-net-config.age
new file mode 100644
index 0000000000000000000000000000000000000000..7c94abdc644b1580b871230237c5e8ae8acac54a
GIT binary patch
literal 694
zcmV;n0!jU0XJsvAZewzJaCB*JZZ2<fXD@a!3N1b$b8~1dWn?lnH8D9LPDx2dT6Z9A
zcw$CzYBFvzS1V;PbuUY4D|A*vWl3!_dTLiqIbwNMVo`HOT1|R-GG_{OHaTy3H%TyK
zFm_roIA>K*S2rt4K|^p^b96^_Y*A}#GD|RcL}^%4F;xmJJ|J^*Xf0)AGBq_ZIUq$a
zSu1RJAU0z&Zck=JNHcbML0K_NHCSdsX-rgYG;nWCLSs&IG*@a`HDobmZCEfx3QuQj
zN_SZ}R82QVRWediS#3pTH&8HYc5ic8ReD-iL~dk6Xi-6AP(@Nr3N0-yAV*I^b8AC3
zPB=p^OG{dCNHJzmLSa)laYc1ebvRjfP*W>ZPg+%Qa#~eM3I$jN%}c8NWL7|0t<wOR
z<SA$(O;E$dH4hCmD0|!$i$}K9o7#?=mDAiwUt4uZQE$b7CF5Ce*o^+RkS1wJl3(aV
z$j~0U(+}{~82AS1Jzxj4%(S~B<zBBvsS7I73~&oT{itG4)aO!93i6>enM|E4FE-hv
zic6?HVh(kwZkYxFHcE*}tHgchYnYcKTts?TfT_0bhSUH#c*5Hn#6<K9JzM1A;d`E$
zs31x9!ge^Rg+YiTJi3R`l&lcU80k;zKE6-GWcr-661M%-6wDaccOrppx4MZ?rJ2e?
zT$KjKM2P3?FLe!n?Mzf-!+S;)ETG*Q;jO!Mk5hnt)IA0tP^~nSNWBEHs#)+wuXb6S
z0ykzZ2>*6JCT~VG2&~Nl8WYL6HVW|cj{gHjC4Eg`Jb{aL%Cpv8e56}k_=EOnTs{5A
z0@6$d%D5|)n$LT55e-#u75kD{1{fX#C1Nk@F-F?IzLS~$6KOd}I!F!t0puh}x*O>7
cWiCJ<nk`=inxP0DP@haWbIe$aU@$1K<CPN`3IG5A

literal 0
HcmV?d00001

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 1d2f200..675fdac 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -19,4 +19,7 @@ in {
 
   # nextcloud
   "nextcloud-admin-passwd.age".publicKeys = all;
+
+  # networkmanager
+  "nm-home-net-config.age".publicKeys = with machines; [ copernicus.pubkey aristotle.pubkey ];
 }