add niks3-auto-upload

bbigras · bbigras · commit d49cd29721e2 · 2026-05-16T02:57:19.000-04:00
diff --git a/configurations/nixos/desktop/default.nix b/configurations/nixos/desktop/default.nix
@@ -18,6 +18,7 @@ in
     self.nixosModules.graphical-steam
     self.nixosModules.graphical-fonts
     self.nixosModules.graphical-trusted
+    self.nixosModules.niks3-auto-upload
     self.nixosModules.pam-limits
     self.nixosModules.hardware-secureboot
     self.nixosModules.services-podman
diff --git a/configurations/nixos/laptop/default.nix b/configurations/nixos/laptop/default.nix
@@ -1,5 +1,6 @@
 # NixOS configuration for laptop
 {
+  config,
   flake,
   pkgs,
   lib,
@@ -18,6 +19,7 @@ in
     self.nixosModules.graphical-steam
     self.nixosModules.graphical-fonts
     self.nixosModules.graphical-trusted
+    self.nixosModules.niks3-auto-upload
     self.nixosModules.pam-limits
     self.nixosModules.hardware-secureboot
     self.nixosModules.services-podman
diff --git a/flake.lock b/flake.lock
diff --git a/flake.nix b/flake.nix
@@ -17,6 +17,12 @@
     # Core infrastructure
     nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
     nixpkgs_resticprofile.url = "github:bbigras/nixpkgs/push-zswsmktvsmpo";
+    niks3 = {
+      url = "github:Mic92/niks3";
+      inputs = {
+        nixpkgs.follows = "nixpkgs";
+      };
+    };
     flake-parts = {
       url = "github:hercules-ci/flake-parts";
       inputs.nixpkgs-lib.follows = "nixpkgs";
diff --git a/modules/nixos/default.nix b/modules/nixos/default.nix
@@ -17,6 +17,7 @@ in
     inputs.home-manager.nixosModules.home-manager
     inputs.impermanence.nixosModules.impermanence
     inputs.lanzaboote.nixosModules.lanzaboote
+    inputs.niks3.nixosModules.niks3-auto-upload
     inputs.nix-index-database.nixosModules.nix-index
     inputs.nixos-facter-modules.nixosModules.facter
   ]
diff --git a/modules/nixos/niks3-auto-upload.nix b/modules/nixos/niks3-auto-upload.nix
@@ -0,0 +1,11 @@
+{ config, ... }:
+
+{
+  age.secrets.desktop-niks3-auth-token.rekeyFile = ../../secrets/niks3-auth-token.age;
+
+  services.niks3-auto-upload = {
+    enable = true;
+    serverUrl = "http://cade:5751";
+    authTokenFile = config.age.secrets.niks3-auth-token.path;
+  };
+}
diff --git a/secrets/niks3-auth-token.age b/secrets/niks3-auth-token.age
@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 rRe3bA ygCbLnwit5V7540pcf0ZWrn8y7urscqSNwvUdrPFNi0
+TanBnU4minwjvWW0QikIWrBOrLeYx08QJCoirxfcD8A
+-> (?S^^&C%-grease /ri29]
+OPlF452cPw
+--- LqTUex19l38m6WGVFv2Si06HGwyyX4HKXZhEP2kdZy4
+V��o��.��Xs���2I���q^#;uj�9Fd;���Äo�O���o�Lp9��.E4��-[���\Z�ou�=z�#�
+�
diff --git a/secrets/rekeyed/desktop/9d80925eac8feaaef468df3e81b32425-desktop-niks3-auth-token.age b/secrets/rekeyed/desktop/9d80925eac8feaaef468df3e81b32425-desktop-niks3-auth-token.age
@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 mXzM5Q 1HzO4qIL0MU2QOofE/zJ3eC4hc3xd6RVIWJFNN5XCCY
+hInZ96JHueaJokGHGvyoBpVecqX4/6OBvFCOE7qhp50
+-> 3V!KD-grease ufL:? ,oCr\
+Sf5DszwvdnnD8qNPR1mndkVnWdrfcog8JAoF1BniPUcW8LKg3rJdvtv+
+--- bstRcSq7GgmBVPWjHF0yLzNk9eFSE5QiDa26TTRCR+M
+|�R�WM�E>��T"���@}PxG���4���hu1�\��jVj���^�1��q���'��R����l���U����4�����e
diff --git a/secrets/rekeyed/laptop/2a2d503fcd2b00d96b5acf073601a73b-desktop-niks3-auth-token.age b/secrets/rekeyed/laptop/2a2d503fcd2b00d96b5acf073601a73b-desktop-niks3-auth-token.age
@@ -0,0 +1,9 @@
+age-encryption.org/v1
+-> ssh-ed25519 Jta5Xg 0GmPdFiwz4o5t9R0LYsDYgbIjk4RAKYPQbf3iXL7Hm4
+DDXgCT4gK7BBdPEkCW0T4dA1As/bXhDtiRR3afS13G4
+-> 2-grease xo39 8W
+q2/c4dDdsIPcXZwmE4l0bulR1L2KN/7RZgurQ2OeQvjJJXQSqp1F4b8p31OeQzcW
+o6wZ44+RLviOpASW
+--- hiKC1IiyjCHzaNGHLBBQzrwNLA7E5QI6F0v220RBvkQ
+���v00����Jړ�Ɩ��ĜnWXx�D͠�7*'6��-;٭X�~�L�`�
+rp1s(R�^��(ݬm�%WK�ʠ'8K6

Original file line number	Diff line number	Diff line change
`@@ -17,6 +17,7 @@ in`
`17`	`17`	`inputs.home-manager.nixosModules.home-manager`
`18`	`18`	`inputs.impermanence.nixosModules.impermanence`
`19`	`19`	`inputs.lanzaboote.nixosModules.lanzaboote`
	`20`	`+ inputs.niks3.nixosModules.niks3-auto-upload`
`20`	`21`	`inputs.nix-index-database.nixosModules.nix-index`
`21`	`22`	`inputs.nixos-facter-modules.nixosModules.facter`
`22`	`23`	`]`