xun/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

some things (tiny commit ik)

Browse source
This commit is contained in:
xunuwu 2024-10-21 21:56:47 +02:00
parent 6b76450816
commit 2c282d8bf7
Signed by: xun
SSH key fingerprint: SHA256:Uot/1WoAjWAeqLOHA5vYy4phhVydsH7jCPmBjaPZfgI
38 changed files with 771 additions and 102 deletions
Download patch file Download diff file Expand all files Collapse all files

52
secrets/hopper/default.nix
View file

@ -1,30 +1,21 @@
{
## TODO use defaultSopsFile mayb
{config, ...}: let
autheliaUser = config.services.authelia.instances.main.user;
in {
sops.secrets = {
wireguard = {
format = "binary";
sopsFile = ./wireguard;
};
wg-private = {
key = "PrivateKey";
sopsFile = ./wireguard.yaml;
group = "systemd-network";
mode = "0640";
grafana-pass = {
format = "binary";
sopsFile = ./grafana-pass;
};
wg-preshared = {
key = "PresharedKey";
sopsFile = ./wireguard.yaml;
group = "systemd-network";
mode = "0640";
wireguard-config = {
format = "binary";
sopsFile = ./wireguard-config;
};
serverenv = {
format = "binary";
sopsFile = ./serverenv;
};
code-server = {
format = "binary";
sopsFile = ./code-server;
};
slskd = {
format = "binary";
sopsFile = ./slskd;
@ -45,27 +36,50 @@
restartUnits = ["podman-betanin.service"];
};
# lldap_jwt_secret = {
# sopsFile = ./lldap.yaml;
# key = "jwt_secret";
# owner = "lldap";
# };
#
# lldap_user_password = {
# sopsFile = ./lldap.yaml;
# key = "user_password";
# owner = "lldap";
# };
# authelia
authelia_lldap_password = {
format = "yaml";
sopsFile = ./authelia.yaml;
key = "lldap_password";
owner = autheliaUser;
};
authelia_jwt_secret = {
format = "yaml";
sopsFile = ./authelia.yaml;
key = "jwt_secret";
owner = autheliaUser;
};
authelia_session_secret = {
format = "yaml";
sopsFile = ./authelia.yaml;
key = "session_secret";
owner = autheliaUser;
};
authelia_encryption_key = {
format = "yaml";
sopsFile = ./authelia.yaml;
key = "encryption_key";
owner = autheliaUser;
};
authelia_storage_password = {
format = "yaml";
sopsFile = ./authelia.yaml;
key = "storage_password";
owner = autheliaUser;
};
brawlstars-api-key = {
format = "binary";
sopsFile = ./brawlstars;