sops: root d, hosts d, modules/servers til multiscrobbler

hosts/workstation/configuration.nix

@@ -1,4 +1,4 @@
-{ pkgs, ... }: {
+{ pkgs, config, ... }: {
   imports = [
     ./hardware-configuration.nix
     ../../base.nix
@@ -45,6 +45,11 @@
       ffmpeg4discord.enable = true;
     };
   };
+  sops.secrets = {
+    "resilio/user" = { };
+    "resilio/host" = { };
+    "resilio/password" = { };
+  };
   networking = {
     hostName = "workstation";
     firewall = let
@@ -81,8 +86,8 @@
         group = "nixremote";
         home = "/var/nixremote/";
         openssh.authorizedKeys.keys = [
-          "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN6HsajaTL+nTJtSIu00M5WJwgt/7fyU59gBr2R7tbnv root@server"
-          "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGrC7sVvDT0is2oq/H1Do99LPaQKvyGMAsrF6/fuf1aP root@miniserver"
+          (builtins.readFile ../../secrets/ssh/ed25519_nixserver.pub)
+          (builtins.readFile ../../secrets/ssh/ed25519_nixminiserver.pub)
         ];
       };
     };
@@ -113,22 +118,20 @@
       fileSystems = [ "/" ];
     };
     resilio = {
-      deviceName = "chichis";
       enable = true;
       useUpnp = true;
       enableWebUI = true;
-      httpPass = "528491";
-      httpLogin = "chichis";
+      httpPass = "cat ${config.sops.secrets."resilio/password".path}";
+      httpLogin = "cat ${config.sops.secrets."resilio/user".path}";
+      deviceName = "cat ${config.sops.secrets."resilio/host".path}";
       httpListenPort = 9876;
       httpListenAddr = "0.0.0.0";
       directoryRoot = "/resilio";
     };
   };
-  virtualisation = {
-    podman = {
-      enable = true;
-      dockerCompat = true;
-      defaultNetwork.settings.dns_enabled = true;
-    };
+  virtualisation.podman = {
+    enable = true;
+    dockerCompat = true;
+    defaultNetwork.settings.dns_enabled = true;
   };
 }