nix-files/secrets
colin b658b93c64 lappy: store the hashed user passwd in git and decrypt it into /etc/passwd on boot
this approach lets me persist the password. persisting /etc/shadow
directly wasn't so feasible. populating /etc/shadow at activation time
is something nix already does and is easy to plug into.
so we store the passwd hash in this repo, but encrypt it to the
destination machine's ssh pubkey to add enough entropy that it's not
brute-forceable through the public git repo.
2022-10-23 06:53:06 -07:00
..
universal net: rename iphone SSID 2022-10-10 04:54:02 -07:00
desko.yaml desko: enable nix-serve 2022-09-14 14:45:07 -07:00
lappy.yaml lappy: store the hashed user passwd in git and decrypt it into /etc/passwd on boot 2022-10-23 06:53:06 -07:00
servo.yaml servo: add freshrss service 2022-10-13 17:52:43 -07:00
universal.yaml secrets: update for moby keys 2022-08-31 17:25:21 -07:00