cilly/flakes
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

hosts/sugarcane: fix secrets

Browse source
This commit is contained in:
LavaDesu 2022-03-28 23:00:30 +07:00
parent 613280b0e2
commit c34578dd03
Signed by: cilly
GPG key ID: 6500251E087653C9
3 changed files with 12 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

1
hosts/sugarcane/default.nix
View file

@ -4,6 +4,7 @@
time.timeZone = "Asia/Singapore"; time.timeZone = "Asia/Singapore";
age.secrets = { age.secrets = {
acme_dns.file = ../../secrets/acme_dns.age;
passwd.file = ../../secrets/passwd.age; passwd.file = ../../secrets/passwd.age;
wg_sugarcane.file = ../../secrets/wg_sugarcane.age; wg_sugarcane.file = ../../secrets/wg_sugarcane.age;
}; };

20
modules/services/nginx.nix
View file

@ -27,16 +27,16 @@
forceSSL = true; forceSSL = true;
root = inputs.website.outPath; root = inputs.website.outPath;
}; };
"_" = { # "_" = {
default = true; # default = true;
addSSL = true; # addSSL = true;
# TODO generate this somewhere # # TODO generate this somewhere
sslCertificate = "/persist/fakeCerts/fake.crt"; # sslCertificate = "/persist/fakeCerts/fake.crt";
sslCertificateKey = "/persist/fakeCerts/fake.key"; # sslCertificateKey = "/persist/fakeCerts/fake.key";
extraConfig = '' # extraConfig = ''
return 444; # return 444;
''; # '';
}; # };
}; };
}; };
} }

2
secrets.nix
View file

@ -8,7 +8,7 @@ in {
"secrets/passwd.age".publicKeys = [ blossom caramel sugarcane rin ]; "secrets/passwd.age".publicKeys = [ blossom caramel sugarcane rin ];
"secrets/wpa_conf.age".publicKeys = [ blossom caramel rin ]; "secrets/wpa_conf.age".publicKeys = [ blossom caramel rin ];
"secrets/acme_dns.age".publicKeys = [ caramel rin ]; "secrets/acme_dns.age".publicKeys = [ caramel sugarcane rin ];
"secrets/warden_admin.age".publicKeys = [ caramel rin ]; "secrets/warden_admin.age".publicKeys = [ caramel rin ];
"secrets/wg_blossom.age".publicKeys = [ blossom rin ]; "secrets/wg_blossom.age".publicKeys = [ blossom rin ];
"secrets/wg_caramel.age".publicKeys = [ caramel rin ]; "secrets/wg_caramel.age".publicKeys = [ caramel rin ];