dustinlyons/nix-secrets.git dependency about nixos-config

[dustinlyons]

Hi @multivac61! Thanks for bringing this to my attention. Looks like I introduced a regression with my refactor. As part of install, it should be asking you for your repo name. I'll fix it shortly.

Re: the nix-secrets repo, I personally think it's better security posture to never include encrypted secrets as part of a public repository. Some folks may disagree (because they're encrypted!), but I like to eliminate all possible attack vectors. Who knows if some tooling has an exploit, or I accidentally do something stupid and include something sensitive when not intended. It's just better for me to keep a nix-secrets repository as private, to avoid any possible error. So that's how the templates are designed. Hope this helps.

[dustinlyons]

Awesome, thanks! I'll correct the redundant ()'s.

[dustinlyons]

@multivac61 Okay, I made some changes. Can you try again?

1. As part of the nix run .#apply step, it will now ask you for your Github name and secrets repo.
2. nix run .#apply then takes this and modifies the flake with your response.

Let me know if you run into any other issues.

[dustinlyons]

Hi @multivac61, any luck getting this to run?

[multivac61]

Apologies for the delay, I went with the non-secret approach. Will try out now 😊

[multivac61]

Works as expected 👍 Thank you Dustin!

p.s. when running mkdir -p nixos-config && (cd nixos-config && nix flake --extra-experimental-features 'nix-command flakes' init -t github:dustinlyons/nixos-config#starter), fish, my terminal emulator complained about the brackets () fish: command substitutions not allowed here