cilly/flakes
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

hosts/sugarcane: fix secrets

Browse source
This commit is contained in:
LavaDesu 2022-03-28 23:00:30 +07:00
parent 613280b0e2
commit c34578dd03
Signed by: cilly
GPG key ID: 6500251E087653C9
3 changed files with 12 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

1
hosts/sugarcane/default.nix
View file

@ -4,6 +4,7 @@
time.timeZone = "Asia/Singapore";
age.secrets = {
acme_dns.file = ../../secrets/acme_dns.age;
passwd.file = ../../secrets/passwd.age;
wg_sugarcane.file = ../../secrets/wg_sugarcane.age;
};

20
modules/services/nginx.nix
View file

@ -27,16 +27,16 @@
forceSSL = true;
root = inputs.website.outPath;
};
"_" = {
default = true;
addSSL = true;
# TODO generate this somewhere
sslCertificate = "/persist/fakeCerts/fake.crt";
sslCertificateKey = "/persist/fakeCerts/fake.key";
extraConfig = ''
return 444;
'';
};
# "_" = {
# default = true;
# addSSL = true;
# # TODO generate this somewhere
# sslCertificate = "/persist/fakeCerts/fake.crt";
# sslCertificateKey = "/persist/fakeCerts/fake.key";
# extraConfig = ''
# return 444;
# '';
# };
};
};
}

2
secrets.nix
View file

@ -8,7 +8,7 @@ in {
"secrets/passwd.age".publicKeys = [ blossom caramel sugarcane rin ];
"secrets/wpa_conf.age".publicKeys = [ blossom caramel rin ];
"secrets/acme_dns.age".publicKeys = [ caramel rin ];
"secrets/acme_dns.age".publicKeys = [ caramel sugarcane rin ];
"secrets/warden_admin.age".publicKeys = [ caramel rin ];
"secrets/wg_blossom.age".publicKeys = [ blossom rin ];
"secrets/wg_caramel.age".publicKeys = [ caramel rin ];