Skip to content

Commit

Permalink
Stop managing ali-desktop home encryption key
Browse files Browse the repository at this point in the history
It breaks boot as the key is not decrypted in time for home to be
mounted.
  • Loading branch information
alisonjenkins committed Jan 17, 2025
1 parent 6cb5b58 commit c527cdb
Showing 1 changed file with 9 additions and 9 deletions.
18 changes: 9 additions & 9 deletions hosts/ali-desktop/configuration.nix
Original file line number Diff line number Diff line change
Expand Up @@ -366,15 +366,15 @@
# path = "/a/secret/path.yaml";
# format = "yaml"; # can be yaml, json, ini, dotenv, binary
# };
home_enc_key = {
format = "binary";
group = config.users.users.nobody.group;
mode = "0400";
neededForUsers = true;
owner = config.users.users.root.name;
path = "/etc/luks/home.key";
sopsFile = ../../secrets/ali-desktop/home-enc-key.enc.bin;
};
# home_enc_key = {
# format = "binary";
# group = config.users.users.nobody.group;
# mode = "0400";
# neededForUsers = true;
# owner = config.users.users.root.name;
# path = "/etc/luks/home.key";
# sopsFile = ../../secrets/ali-desktop/home-enc-key.enc.bin;
# };
};
};

Expand Down

0 comments on commit c527cdb

Please sign in to comment.