Parcourir la source

feat(git): add a pat for control

Zander Hawke il y a 1 jour
Parent
commit
5964473fd7
3 fichiers modifiés avec 22 ajouts et 14 suppressions
  1. 4 4
      flake.lock
  2. 11 5
      home/features/cli/git.nix
  3. 7 5
      home/meili.nix

+ 4 - 4
flake.lock

@@ -674,11 +674,11 @@
     },
     "secrets": {
       "locked": {
-        "lastModified": 1781947547,
-        "narHash": "sha256-Z4OGXsSdFPCcyh67diybzoR2LqmrfuIWab0x1m7DBI4=",
+        "lastModified": 1781953871,
+        "narHash": "sha256-Huf0eJzhXWjApux33mjij7C7ZH6+RpaO9ERvzTNpygg=",
         "ref": "refs/heads/master",
-        "rev": "35fbe2dc257c7f7b92541755b8936926db55ba17",
-        "revCount": 27,
+        "rev": "bb868d5b1cf6ee8d8f3bce1ff17e53c0b5864604",
+        "revCount": 28,
         "type": "git",
         "url": "ssh://[email protected]/control/secrets.git"
       },

+ 11 - 5
home/features/cli/git.nix

@@ -1,4 +1,4 @@
-{ pkgs, ... }:
+{ config, pkgs, ... }:
 
 let
   aesir = {
@@ -11,10 +11,16 @@ let
     core.sshCommand = "ssh -i ~/.ssh/id_aesirdev.pub";
   };
 
-  control.user = {
-    email = "[email protected]";
-    name = "Zander Hawke";
-    signingKey = "ED5EAAA8E895B23A";
+  control = {
+    user = {
+      email = "[email protected]";
+      name = "Zander Hawke";
+      signingKey = "ED5EAAA8E895B23A";
+    };
+
+    credential."https://git.t5.st" = {
+      helper = "store --file ${config.age.secrets."meili/control-pat".path}";
+    };
   };
 
   zofie-architect = {

+ 7 - 5
home/meili.nix

@@ -1,8 +1,9 @@
-{ config
-, inputs
-, lib
-, pkgs
-, ...
+{
+  config,
+  inputs,
+  lib,
+  pkgs,
+  ...
 }:
 let
   configHome = "${config.xdg.configHome}/gnupg";
@@ -38,6 +39,7 @@ in
   # FIXME: change this to a different identity
   age.identityPaths = [ "/Users/thomas/.ssh/builder_ed25519" ];
   age.secrets = {
+    "meili/control-pat".file = secrets."meili/control-pat.age";
     "meili/openrouter".file = secrets."meili/openrouter.age";
   };
 }