yggdrasil: automount nixberry share

This commit is contained in:
Christoph Hollizeck 2025-12-08 19:17:37 +01:00
parent d7660303f7
commit 4db5df937e
Signed by: Daholli
GPG key ID: 249300664F2AF2C7
2 changed files with 19 additions and 11 deletions

View file

@ -63,8 +63,21 @@ topLevel: {
root
];
sops.secrets = {
"remotebuild/private-key" = {
sopsFile = ../../../secrets/secrets.yaml;
owner = "cholli";
mode = "0400";
};
"cholli/private-key" = {
sopsFile = ../../../secrets/secrets.yaml;
mode = "0600";
};
};
fileSystems."/mnt/pi_share" = {
device = "cholli@nixberry:/storage/";
device = "cholli@192.168.178.2:/storage/";
fsType = "sshfs";
options = [
@ -76,17 +89,10 @@ topLevel: {
# SSH options
"reconnect" # handle connection drops
"ServerAliveInterval=15" # keep connections alive
"IdentityFile=${config.sops.secrets."cholli/private-key".path}"
];
};
sops.secrets = {
"remotebuild/private-key" = {
sopsFile = ../../../secrets/secrets.yaml;
owner = "cholli";
mode = "0400";
};
};
nix = {
distributedBuilds = true;
settings.builders-use-substitutes = true;