notohh/snowflake
notohh/snowflake
1
0
Fork 0
Code Issues Pull requests Projects 1 Releases Packages Wiki Activity

sops: move secrets to specific services

Browse source
This commit is contained in:
notohh 2023-05-14 23:03:38 -04:00
parent a886511ca0
commit d714b3cdae
Signed by: notohh
GPG key ID: BD47506D475EE86D
3 changed files with 5 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
modules/services/foundryvtt.nix
View file

@ -1,4 +1,6 @@
{config, ...}: { {...}: {
sops.secrets.foundry-username = {};
sops.secrets.foundry-password = {};
virtualisation.oci-containers.containers.foundryvtt = { virtualisation.oci-containers.containers.foundryvtt = {
image = "felddy/foundryvtt:release"; image = "felddy/foundryvtt:release";
volumes = [ volumes = [

2
modules/services/traefik.nix
View file

@ -1,6 +1,6 @@
{config, ...}: { {config, ...}: {
sops.secrets.cloudflare-api-key = {};
networking.firewall.allowedTCPPorts = [80 443 8080]; networking.firewall.allowedTCPPorts = [80 443 8080];
systemd.user.services.traefik.after = ["docker.service"]; systemd.user.services.traefik.after = ["docker.service"];
systemd.services.traefik = { systemd.services.traefik = {
environment = { environment = {

5
modules/sops.nix
View file

@ -1,9 +1,6 @@
{config, ...}: { {...}: {
sops = { sops = {
defaultSopsFile = ../secrets/secrets.yaml; defaultSopsFile = ../secrets/secrets.yaml;
age.keyFile = "/home/notoh/.config/sops/age/keys.txt"; age.keyFile = "/home/notoh/.config/sops/age/keys.txt";
secrets.foundry-username = {};
secrets.foundry-password = {};
secrets.cloudflare-api-key = {};
}; };
} }