Hi again @nicolas-goudry! ![]()
Now that I’ve spent some time analyzing your (well-organized) repo, I’m having some questions :
-
Could you explain how do you manage your keys used for SOPS? Do you have any backups of the hosts’ keys (i.e. ed25519) + age key? Per hosts?
-
What’s your process to change passwords/secrets (i.e. users, root)? Do you edit your
secrets.yamlfiles and run the below. If I runpasswdand change the user’s password (imperatively), will it be reset on next boot, by reading thehashedPasswordFile? Same goes for wireless network passwords, will they persist (if using impermanence, are they going to be removed)?
- Why disable IPv6?
Saw some other thread about it : Disabling IPv6 - `enableIPv6` and `kernelParams` - #6 by nopro404
- What’s the purpose of registering flake inputs?
- As for now, what do you mean by the below note, since it seems that your HM configs are OK, aren’t they?
- Off topic, but why
warpis outside thelib.optionals isLinuxcondition, since it seems to be a gnome-specific application?
Thanks for your time and for sharing your config! ![]()