plumjam/nixos - Change BDDKGGL7QNTFAX3ARMV4VK2XQCLOVJNFLXFCZB7IFCGEATCMVBIAC

hosts.plum: add agenix and secrets config

Created by James Plummer on August 30, 2025

BDDKGGL7QNTFAX3ARMV4VK2XQCLOVJNFLXFCZB7IFCGEATCMVBIAC

Dependencies

In channels

main

Change contents

File addition: secrets.nix (----------)

[4.2]

let
	james = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA7WV4+7uhIWQVHEN/2K0jJPTaZ/HbG3W8OKSpzmPBI4";
	# users = [ james ];
in
{
  "hosts/plum/password.age".publicKeys = [ james ];
}

File addition: password.age (----------)
[3.7]
Replacement in hosts/plum/configuration.nix at line 1 [3.1247]
B:BD[3.1247] → [3.1248:1281]
```
{ pkgs, lib, modulesPath, ... }:
```
[3.1247]
[3.1281]
```
{ pkgs, lib, modulesPath, config, ... }:
```
Insertion in hosts/plum/configuration.nix at line 13 [3.1247]
[3.1491]
[3.1491]
```
	age.secrets.password.file = ./password.age;
```

Replacement in hosts/plum/configuration.nix at line 20 [3.1247]

B:BD[3.1617] → [3.1617:1721]

    extraGroups = [
      "wheel" # sudo access
      "docker" # if using Docker
      "dialout"
    ];

[3.1617]

[3.1721]

		hashedPasswordFile = config.age.secrets.password.path;
    extraGroups = [ "wheel" ];

Replacement in hosts/plum/configuration.nix at line 28 [3.1247]

B:BD[3.1909] → [3.1909:1994]

		"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE0LRmns5YhIUkmr4DCJPUeLKs6aDFNTeXBhrQoTxpme"

[3.1909]

[3.1994]

		"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA7WV4+7uhIWQVHEN/2K0jJPTaZ/HbG3W8OKSpzmPBI4"

Insertion in hosts/plum/configuration.nix at line 30 [3.1247]
[3.1998]
[3.1998]
```
	home-manager.users = {
		james = {};
	};
```
Replacement in hosts/plum/configuration.nix at line 38 [3.1247]
B:BD[3.2058] → [3.2058:2096]
```
      PasswordAuthentication = false;
```
[3.2058]
[3.2096]
```
      PasswordAuthentication = true;
```
Insertion in hosts/plum/configuration.nix at line 51 [3.1247]
[3.2317]
[3.2317]
```
    useDHCP = lib.mkDefault true;
    interfaces = {};
```

Replacement in flake.nix at line 27 [4.24075]

B:BD[5.249] → [3.2778:2838]

    trusted-users            = [ "root" "@wheel" "james" ];

[5.249]

[3.2838]

    trusted-users            = [ "root" "@wheel" ];

Insertion in flake.nix at line 34 [4.24075]
[4.24192]
[4.24192]
Insertion in flake.nix at line 37 [4.24075]
[4.24301]
[6.4414]
Insertion in flake.nix at line 40 [4.24075]
[6.4525]
[4.24301]
Insertion in flake.nix at line 43 [4.24075]
[4.24421]
[4.24421]
Insertion in flake.nix at line 46 [4.24075]
[4.24513]
[7.3230]

Insertion in flake.nix at line 58 [4.24075]

[3.2967]

[4.24513]


		agenix.url = "github:ryantm/agenix";
		agenix.inputs.nixpkgs.follows = "nixpkgs";

Replacement in flake.nix at line 63 [4.24075]

B:BD[4.24519] → [3.2968:3087]

  outputs = inputs @ { nixpkgs, nixos-wsl, nix-darwin, home-manager, fenix, nvf, bacon-ls, fff-nvim, disko, ... }: let

[4.24519]

[8.3273]

  outputs = inputs @ { nixpkgs, nixos-wsl, nix-darwin, home-manager, fenix, nvf, bacon-ls, fff-nvim, disko, agenix, ... }: let

Insertion in flake.nix at line 83 [4.24075]
[9.1394]
[6.4759]
```
					agenix
```
Insertion in flake.nix at line 134 [4.24075]
[3.3301]
[3.3301]
```
				agenix.nixosModules.default
```

Insertion in flake.lock at line 3 [4.25342]

[4.25358]

[10.28650]

    "agenix": {
      "inputs": {
        "darwin": "darwin",
        "home-manager": "home-manager",
        "nixpkgs": [
          "nixpkgs"
        ],
        "systems": "systems"
      },
      "locked": {
        "lastModified": 1754433428,
        "narHash": "sha256-NA/FT2hVhKDftbHSwVnoRTFhes62+7dxZbxj5Gxvghs=",
        "owner": "ryantm",
        "repo": "agenix",
        "rev": "9edb1787864c4f59ae5074ad498b6272b3ec308d",
        "type": "github"
      },
      "original": {
        "owner": "ryantm",
        "repo": "agenix",
        "type": "github"
      }
    },

Insertion in flake.lock at line 60 [4.25342]

[9.1798]

[10.29167]

        "type": "github"
      }
    },
    "darwin": {
      "inputs": {
        "nixpkgs": [
          "agenix",
          "nixpkgs"
        ]
      },
      "locked": {
        "lastModified": 1744478979,
        "narHash": "sha256-dyN+teG9G82G+m+PX/aSAagkC+vUv0SgUw3XkPhQodQ=",
        "owner": "lnl7",
        "repo": "nix-darwin",
        "rev": "43975d782b418ebf4969e9ccba82466728c2851b",
        "type": "github"
      },
      "original": {
        "owner": "lnl7",
        "ref": "master",
        "repo": "nix-darwin",

Replacement in flake.lock at line 204 [4.25342]
B:BD[10.29247] → [10.29247:29276]
```
        "systems": "systems"
```
[10.29247]
[10.29276]
```
        "systems": "systems_2"
```
Replacement in flake.lock at line 222 [4.25342]
B:BD[9.2448] → [9.2448:2479]
```
        "systems": "systems_2"
```
[9.2448]
[9.2479]
```
        "systems": "systems_3"
```
Insertion in flake.lock at line 241 [4.25342]
[4.26408]
[4.26408]
```
          "agenix",
```

Insertion in flake.lock at line 246 [4.25342]

[4.26465]

[2.87]

        "lastModified": 1745494811,
        "narHash": "sha256-YZCh2o9Ua1n9uCvrvi5pRxtuVNml8X2a03qIFfRKpFs=",
        "owner": "nix-community",
        "repo": "home-manager",
        "rev": "abfad3d2958c9e6300a883bd443512c55dfeb1be",
        "type": "github"
      },
      "original": {
        "owner": "nix-community",
        "repo": "home-manager",
        "type": "github"
      }
    },
    "home-manager_2": {
      "inputs": {
        "nixpkgs": [
          "nixpkgs"
        ]
      },
      "locked": {

Replacement in flake.lock at line 396 [4.25342]
B:BD[11.697] → [9.2888:2919]
```
        "systems": "systems_3"
```
[11.697]
[7.5423]
```
        "systems": "systems_4"
```
Insertion in flake.lock at line 414 [4.25342]
[4.27921]
[10.30686]
```
        "agenix": "agenix",
```
Replacement in flake.lock at line 419 [4.25342]
∅:D[9.2952] → [4.27947:27987]
B:BD[4.27947] → [4.27947:27987]
```
        "home-manager": "home-manager",
```
[9.2952]
[6.6108]
```
        "home-manager": "home-manager_2",
```

Insertion in flake.lock at line 495 [4.25342]

[9.3503]

      "locked": {
        "lastModified": 1681028828,
        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
        "owner": "nix-systems",
        "repo": "default",
        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
        "type": "github"
      },
      "original": {
        "owner": "nix-systems",
        "repo": "default",
        "type": "github"
      }
    },
    "systems_4": {

hosts.plum: add agenix and secrets config

Dependencies

In channels

Change contents

File addition: secrets.nix (----------)

File addition: password.age (----------)

Replacement in hosts/plum/configuration.nix at line 1 [3.1247]

Insertion in hosts/plum/configuration.nix at line 13 [3.1247]

Replacement in hosts/plum/configuration.nix at line 20 [3.1247]

Replacement in hosts/plum/configuration.nix at line 28 [3.1247]

Insertion in hosts/plum/configuration.nix at line 30 [3.1247]

Replacement in hosts/plum/configuration.nix at line 38 [3.1247]

Insertion in hosts/plum/configuration.nix at line 51 [3.1247]

Replacement in flake.nix at line 27 [4.24075]

Insertion in flake.nix at line 34 [4.24075]

Insertion in flake.nix at line 37 [4.24075]

Insertion in flake.nix at line 40 [4.24075]

Insertion in flake.nix at line 43 [4.24075]

Insertion in flake.nix at line 46 [4.24075]

Insertion in flake.nix at line 58 [4.24075]

Replacement in flake.nix at line 63 [4.24075]

Insertion in flake.nix at line 83 [4.24075]

Insertion in flake.nix at line 134 [4.24075]

Insertion in flake.lock at line 3 [4.25342]

Insertion in flake.lock at line 60 [4.25342]

Replacement in flake.lock at line 204 [4.25342]

Replacement in flake.lock at line 222 [4.25342]

Insertion in flake.lock at line 241 [4.25342]

Insertion in flake.lock at line 246 [4.25342]

Replacement in flake.lock at line 396 [4.25342]

Insertion in flake.lock at line 414 [4.25342]

Replacement in flake.lock at line 419 [4.25342]

Insertion in flake.lock at line 495 [4.25342]