remove clear password

flake.lock

@@ -7,11 +7,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1769524058,
-        "narHash": "sha256-zygdD6X1PcVNR2PsyK4ptzrVEiAdbMqLos7utrMDEWE=",
+        "lastModified": 1768923567,
+        "narHash": "sha256-GVJ0jKsyXLuBzRMXCDY6D5J8wVdwP1DuQmmvYL/Vw/Q=",
         "owner": "nix-community",
         "repo": "disko",
-        "rev": "71a3fc97d80881e91710fe721f1158d3b96ae14d",
+        "rev": "00395d188e3594a1507f214a2f15d4ce5c07cb28",
         "type": "github"
       },
       "original": {
@@ -54,11 +54,11 @@
     },
     "nixpkgs-unstable": {
       "locked": {
-        "lastModified": 1770115704,
-        "narHash": "sha256-KHFT9UWOF2yRPlAnSXQJh6uVcgNcWlFqqiAZ7OVlHNc=",
+        "lastModified": 1768886240,
+        "narHash": "sha256-C2TjvwYZ2VDxYWeqvvJ5XPPp6U7H66zeJlRaErJKoEM=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "e6eae2ee2110f3d31110d5c222cd395303343b08",
+        "rev": "80e4adbcf8992d3fd27ad4964fbb84907f9478b0",
         "type": "github"
       },
       "original": {
@@ -84,11 +84,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1770145881,
-        "narHash": "sha256-ktjWTq+D5MTXQcL9N6cDZXUf9kX8JBLLBLT0ZyOTSYY=",
+        "lastModified": 1768863606,
+        "narHash": "sha256-1IHAeS8WtBiEo5XiyJBHOXMzECD6aaIOJmpQKzRRl64=",
         "owner": "Mic92",
         "repo": "sops-nix",
-        "rev": "17eea6f3816ba6568b8c81db8a4e6ca438b30b7c",
+        "rev": "c7067be8db2c09ab1884de67ef6c4f693973f4a2",
         "type": "github"
       },
       "original": {

modules/core/default.nix

@@ -5,7 +5,6 @@
   imports = [
     ./grub.nix
     ./packages.nix
-    ./sops.nix
     ./ssh.nix
     ./system.nix
     ./tty.nix

modules/core/packages.nix

@@ -15,7 +15,6 @@
     pkgs.unzip
     pkgs.sops
     pkgs.ssh-to-age
-    pkgs.age
     pkgs.nixos-anywhere
     pkgs.nixos-generators
     pkgs.efibootmgr
@@ -26,7 +25,7 @@
     pkgs.fzf
     pkgs.bc
     pkgs.wakeonlan
-    pkgs.openssl
+    pkgs.samba
   ];
   services = {
     locate = {

modules/core/sops.nix

@@ -1,19 +0,0 @@
-{
-  inputs,
-  ...
-}:
-let
-  secretsPath = builtins.toString inputs.mysecrets;
-in
-{
-  sops = {
-    defaultSopsFile = "${secretsPath}/secrets.yaml";
-    age = {
-      sshKeyPaths = [
-        "/etc/ssh/ssh_host_ed25519_key"
-      ];
-      keyFile = "/var/lib/sops-nix/key.txt";
-      generateKey = true;
-    };
-  };
-}

modules/core/users.nix

@@ -5,11 +5,6 @@
   ...
 }:
 {
-  sops.secrets = {
-    "users_password/beastie" = {
-      neededForUsers = true;
-    };
-  };
   users = {
     users = {
       ${username} = {
@@ -23,7 +18,7 @@
           "video"
         ];
         openssh.authorizedKeys.keys = [
-          "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAKMJ3TkEmRQcX7RQijNa2km6a2xXJk6M6FERh7C9nTJ"
+          config.sops.secrets."ssh_keys/beastie_priv".path
         ];
         shell = pkgs.zsh;
       };

modules/optionnals/desktop/code.nix

@@ -95,7 +95,5 @@ in
     pkgs.ansible
     pkgs.python313
     pkgs.claude-code
-    pkgs.nodejs
-    pkgs.php
   ];
 }

modules/optionnals/desktop/config/etc/xdg/hypr/hyprland.conf

@@ -314,11 +314,8 @@ bindl = , XF86AudioPrev, exec, playerctl previous
 # windowrule = nofocus,class:^$,title:^$,xwayland:1,floating:1,fullscreen:0,pinned:0
 
 # Supprimer la transparence pour des applications spécifiques
-# Opacity order : active, inactive, fullscreen
-windowrule = match:class firefox, opacity 1.0 override 0.95 override 1.0 override
-windowrule = match:class chromium, opacity 1.0 override 0.95 override 1.0 override
-windowrule = match:class mpv, opacity 0.95 override 0.80 override 1.0 override
-
-#windowrule = match:class mpv, fullscreen override
-#windowrulev2 = fullscreen,class:^(mpv)$
+windowrulev2 = opacity 1.0 override,class:^(firefox)$
+windowrulev2 = opacity 1.0 override,class:^(chromium)$
+windowrulev2 = opacity 1.0 override,class:^(mpv)$
 
+windowrulev2 = fullscreen,class:^(mpv)$

modules/optionnals/desktop/packages.nix

@@ -26,11 +26,6 @@
     pkgs.catppuccin-cursors
     pkgs.catppuccin-gtk
     pkgs.postman
-    pkgs.samba
-    pkgs.openldap
-    pkgs.argocd
-    pkgs.talosctl
-    pkgs.talhelper
   ];
   fonts.packages = [
     pkgs.nerd-fonts.dejavu-sans-mono

modules/optionnals/desktop/virt-manager.nix

@@ -4,4 +4,4 @@
 {
   programs.virt-manager.enable = true;
   virtualisation.spiceUSBRedirection.enable = true;
-}
+}

modules/optionnals/docker.nix

@@ -1,8 +0,0 @@
-{
-  username,
-  ...
-}:
-{
-  virtualisation.docker.enable = true;
-  users.users.${username}.extraGroups = [ "docker" ];
-}

modules/optionnals/hosts/home-nix.nix

@@ -7,7 +7,6 @@
   imports = [
     #../ai.nix
     ../autologin.nix
-    ../docker.nix
     ../k8s.nix
     ../libvirt.nix
     ../openfortivpn.nix
@@ -81,8 +80,6 @@
       #172.18.20.37   sso.grandbesancon.fr
       #172.18.20.229  auth.grandbesancon.fr
       #172.18.20.181  traefikauth.grandbesancon.fr
-      172.18.21.174     test-patchmon.grandbesancon.fr
-      172.18.229.240    test-mycarto-autonome.grandbesancon.fr
     '';
     wireguard = {
       interfaces = {

modules/optionnals/hosts/work-nix.nix

@@ -6,7 +6,6 @@
 {
   imports = [
     ../autologin.nix
-    ../docker.nix
     ../k8s.nix
     ../libvirt.nix
     ../openfortivpn.nix
@@ -35,8 +34,7 @@
   networking = {
     networkmanager.enable = true;
     extraHosts = ''
-      carto-interavtive               172.18.20.134
-      test-patchmon.grandbesancon.fr  172.18.21.174
+      carto-interavtive 172.18.20.134
       test-crowdsec.grandbesancon.fr  172.18.21.67
       test-syslog.grandbesancon.fr    172.18.21.67
     '';

modules/optionnals/libvirt.nix

@@ -4,9 +4,6 @@
   ...
 }:
 {
-  users.users.${username} = {
-    extraGroups = [ "libvirtd" ];
-  };
   virtualisation = {
     libvirtd = {
       enable = true;
@@ -15,13 +12,11 @@
         #package = pkgs.qemu;
         runAsRoot = true;
         swtpm.enable = true;
-        vhostUserPackages = [
-          pkgs.virtiofsd
-        ];
       };
     };
+
+  };
+  users.users.${username} = {
+    extraGroups = [ "libvirtd" ];
   };
-  environment.systemPackages = with pkgs; [
-    virtiofsd
-  ];
 }

modules/optionnals/sops-desktop.nix

@@ -1,61 +1,76 @@
 {
+  inputs,
   username,
   ...
 }:
+let
+  secretsPath = builtins.toString inputs.mysecrets;
+in
 {
-  sops.secrets = {
-    "users_password/beastie" = {
-      neededForUsers = true;
+  sops = {
+    defaultSopsFile = "${secretsPath}/secrets.yaml";
+    age = {
+      sshKeyPaths = [
+        "/etc/ssh/ssh_host_ed25519_key"
+      ];
+      keyFile = "/var/lib/sops-nix/key.txt";
+      generateKey = true;
     };
-    "ssh_keys/default_pub" = {
-      owner = "${username}";
-      mode = "0644";
-      path = "/home/${username}/.ssh/id_ed25519.pub";
-    };
-    "ssh_keys/default_priv" = {
-      owner = "${username}";
-      mode = "0600";
-      path = "/home/${username}/.ssh/id_ed25519";
-    };
-    "ssh_keys/ansible_pub" = {
-      owner = "${username}";
-      mode = "0644";
-      path = "/home/${username}/.ssh/id_ed25519_ansible.pub";
-    };
-    "ssh_keys/ansible_priv" = {
-      owner = "${username}";
-      mode = "0600";
-      path = "/home/${username}/.ssh/id_ed25519_ansible";
-    };
-    "ssh_keys/beastie_pub" = {
-      owner = "${username}";
-      mode = "0644";
-      path = "/home/${username}/.ssh/id_ed25519_beastie.pub";
-    };
-    "ssh_keys/beastie_priv" = {
-      owner = "${username}";
-      mode = "0600";
-      path = "/home/${username}/.ssh/id_ed25519_beastie";
-    };
-    "ssh_keys/gitea_semaphore_pub" = {
-      owner = "${username}";
-      mode = "0644";
-      path = "/home/${username}/.ssh/id_ed25519_gitea_semaphore.pub";
-    };
-    "ssh_keys/gitea_semaphore_priv" = {
-      owner = "${username}";
-      mode = "0600";
-      path = "/home/${username}/.ssh/id_ed25519_gitea_semaphore";
-    };
-    "ssh_keys/wol_pub" = {
-      owner = "${username}";
-      mode = "0644";
-      path = "/home/${username}/.ssh/id_ed25519_wol";
-    };
-    "ssh_keys/wol_priv" = {
-      owner = "${username}";
-      mode = "0600";
-      path = "/home/${username}/.ssh/id_ed25519_wol.priv";
+
+    secrets = {
+      "users_password/beastie" = {
+        neededForUsers = true;
+      };
+      "ssh_keys/default_pub" = {
+        owner = "${username}";
+        mode = "0644";
+        path = "/home/${username}/.ssh/id_ed25519.pub";
+      };
+      "ssh_keys/default_priv" = {
+        owner = "${username}";
+        mode = "0600";
+        path = "/home/${username}/.ssh/id_ed25519";
+      };
+      "ssh_keys/ansible_pub" = {
+        owner = "${username}";
+        mode = "0644";
+        path = "/home/${username}/.ssh/id_ed25519_ansible.pub";
+      };
+      "ssh_keys/ansible_priv" = {
+        owner = "${username}";
+        mode = "0600";
+        path = "/home/${username}/.ssh/id_ed25519_ansible";
+      };
+      "ssh_keys/beastie_pub" = {
+        owner = "${username}";
+        mode = "0644";
+        path = "/home/${username}/.ssh/id_ed25519_beastie.pub";
+      };
+      "ssh_keys/beastie_priv" = {
+        owner = "${username}";
+        mode = "0600";
+        path = "/home/${username}/.ssh/id_ed25519_beastie";
+      };
+      "ssh_keys/gitea_semaphore_pub" = {
+        owner = "${username}";
+        mode = "0644";
+        path = "/home/${username}/.ssh/id_ed25519_gitea_semaphore.pub";
+      };
+      "ssh_keys/gitea_semaphore_priv" = {
+        owner = "${username}";
+        mode = "0600";
+        path = "/home/${username}/.ssh/id_ed25519_gitea_semaphore";
+      };
+      "ssh_keys/wol_pub" = {
+        owner = "${username}";
+        mode = "0644";
+        path = "/home/${username}/.ssh/id_ed25519_wol";
+      };
+      "ssh_keys/wol_priv" = {
+        owner = "${username}";
+        mode = "0600";
+        path = "/home/${username}/.ssh/id_ed25519_wol.priv";
+      };
     };
   };
 }

modules/optionnals/wakeonlan.nix

@@ -17,7 +17,7 @@
   };
   environment.systemPackages = [ pkgs.ethtool ];
 
-  my.wolipv6address = "2a01:e0a:f5d:3400:6b2c:41d7:e9f5";
+  my.wolipv6address = "2a01:e0a:9cc:99d0:8f3a:6b2c:41d7:e9f5";
 
   boot.initrd = {
     network = {
@@ -32,7 +32,7 @@
       };
       postCommands = ''
         ip -6 addr add ${config.my.wolipv6address}/64 dev ${config.my.laninterface}
-        ip -6 route add default via fe80::3a07:16ff:fe11:45a8 dev ${config.my.laninterface}
+        ip -6 route add default via fe80::224:d4ff:fea5:65bd dev ${config.my.laninterface}
       '';
     };
     availableKernelModules = [ "r8169" ];