chvp/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Start using age for secret management

Browse source
This commit is contained in:
Charlotte Van Petegem 2021-06-20 00:18:20 +02:00
parent 276c8f33c8
commit da9160559c
No known key found for this signature in database
GPG key ID: 019E764B7184435A
39 changed files with 281 additions and 30 deletions
Download patch file Download diff file Expand all files Collapse all files

6
modules/nextcloud.nix
View file

@ -20,7 +20,7 @@
dbtype = "pgsql";
dbhost = "/run/postgresql";
adminuser = "admin";
adminpassFile = "${config.chvp.dataPrefix}/var/secrets/nextcloud-admin-password";
adminpassFile = config.age.secrets."passwords/services/nextcloud-admin".path;
};
};
nginx.virtualHosts."nextcloud.vanpetegem.me" = {
@ -37,6 +37,10 @@
}];
};
};
age.secrets."passwords/services/nextcloud-admin" = {
file = ../secrets/passwords/services/nextcloud-admin.age;
owner = "nextcloud";
};
systemd.services."nextcloud-setup" = {
requires = [ "postgresql.service" ];
after = [ "postgresql.service" ];