xun/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

clean up hopper configuration

Browse source
This commit is contained in:
xunuwu 2025-02-11 01:06:08 +01:00
parent fb35ab4c18
commit f0ab5391f7
Signed by: xun
SSH key fingerprint: SHA256:Uot/1WoAjWAeqLOHA5vYy4phhVydsH7jCPmBjaPZfgI
22 changed files with 9 additions and 899 deletions
Download patch file Download diff file Expand all files Collapse all files

111
sys/profiles/secrets/hopper/default.nix
View file

@ -1,130 +1,21 @@
## TODO use defaultSopsFile mayb
{config, ...}: let
# autheliaUser = config.services.authelia.instances.main.user;
in {
{config, ...}: {
sops.secrets = {
wireguard = {
format = "binary";
sopsFile = ./wireguard;
};
oauth2-proxy = {
format = "binary";
sopsFile = ./oauth2-proxy;
};
# grafana-pass = {
# format = "binary";
# sopsFile = ./grafana-pass;
# };
# wireguard-config = {
# format = "binary";
# sopsFile = ./wireguard-config;
# };
slskd = {
format = "binary";
sopsFile = ./slskd;
# restartUnits = ["podman-slskd.service"];
};
cloudflare = {
format = "binary";
sopsFile = ./cloudflare;
};
# jackett = {
# format = "binary";
# sopsFile = ./jackett;
# restartUnits = ["podman-qbittorrent.service"];
# };
# betanin = {
# format = "binary";
# sopsFile = ./betanin;
# restartUnits = ["podman-betanin.service"];
# };
transmission = {
format = "binary";
sopsFile = ./transmission;
};
# authentik = {
# format = "binary";
# sopsFile = ./authentik;
# };
"kanidm/admin_pass" = {
sopsFile = ./kanidm.yaml;
owner = "kanidm";
};
"kanidm/idm_admin_pass" = {
sopsFile = ./kanidm.yaml;
owner = "kanidm";
};
# firefly = {
# format = "binary";
# sopsFile = ./firefly;
# owner = config.services.firefly-iii.user;
# };
# firefly-data-importer = {
# format = "binary";
# sopsFile = ./firefly-data-importer;
# owner = config.services.firefly-iii-data-importer.user;
# };
# "keycloak/db" = {
# sopsFile = ./keycloak.yaml;
# owner = "keycloak";
# };
#
# "lldap/jwt" = {
# sopsFile = ./lldap.yaml;
# owner = "lldap";
# };
#
# "lldap/password" = {
# sopsFile = ./lldap.yaml;
# owner = "lldap";
# };
# authelia
# authelia_lldap_password = {
# format = "yaml";
# sopsFile = ./authelia.yaml;
# key = "lldap_password";
# # owner = autheliaUser;
# };
# authelia_jwt_secret = {
# format = "yaml";
# sopsFile = ./authelia.yaml;
# key = "jwt_secret";
# # owner = autheliaUser;
# };
# authelia_session_secret = {
# format = "yaml";
# sopsFile = ./authelia.yaml;
# key = "session_secret";
# #owner = autheliaUser;
# };
# authelia_encryption_key = {
# format = "yaml";
# sopsFile = ./authelia.yaml;
# key = "encryption_key";
# #owner = autheliaUser;
# };
# authelia_storage_password = {
# format = "yaml";
# sopsFile = ./authelia.yaml;
# key = "storage_password";
# #owner = autheliaUser;
# };
# brawlstars-api-key = {
# format = "binary";
# sopsFile = ./brawlstars;
# };
# wakapi = {
# format = "binary";
# sopsFile = ./wakapi;
# mode = "004";
# };
};
}