From 168d1d69334b9385a3e30b40ffc8c40b35786eaa Mon Sep 17 00:00:00 2001
From: kB01 <kB01@kb-one.de>
Date: Sun, 26 Jan 2025 02:42:29 +0100
Subject: [PATCH] Added Sops, Disabled Binary-Cache, VIM as default Editor

---
 systems/x86_64-linux/kb-game-01/default.nix | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/systems/x86_64-linux/kb-game-01/default.nix b/systems/x86_64-linux/kb-game-01/default.nix
index 36d77b0..dc5b070 100644
--- a/systems/x86_64-linux/kb-game-01/default.nix
+++ b/systems/x86_64-linux/kb-game-01/default.nix
@@ -43,6 +43,7 @@
     extraGroups = [ "wheel" ]; # Enable ‘sudo’ for the user.
     packages = with pkgs; [
       vim
+      sops
     ];
   };
 
@@ -51,6 +52,7 @@
     openssh.authorizedKeys.keys = [
       "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBHdxVb42GEb/rwrsQx/Wc2v2P+WIq8/WNlF+l31Rl/a Remotebuilds from HyperC"
       "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL/WONflZXVoZd8I4HdNMXNtoYELnCaxqdFY0QKDXXS9 Remotebuilds from Rubtrm"
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJqjdhtK0xeJcHwwCAia6I+WuZCkN9pUS21MNjJ2jOuc Remotebuilds from LANA9Z"
     ];
   };
 
@@ -62,6 +64,14 @@
     tree
   ];
 
+  # Default Editor
+  programs.vim.enable = true;
+  programs.vim.defaultEditor = true;
+
+  # Sops Secrets Config
+  sops.defaultSopsFormat = "yaml";
+  sops.age.keyFile = "/home/master/.config/sops/age/keys.txt";
+
   # SSH and Mosh
   services.openssh = {
     enable = true;
@@ -83,7 +93,7 @@
   services.forgejo-runner.enable = true;
 
   # Binary Cache 
-  services.binary-cache.enable = true;
+  services.binary-cache.enable = false; # No Binary-Cache, when there are Secrets in the /nix/store
 
   # Enable QUEMU Quest Agent
   services.qemuGuest.enable = true;