ambroisie/nix-config
ambroisie/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

modules: services: nginx: allow sso secret files

Browse source 
This is in preparation of the migration to agenix, which does not allow
access to the secrets at build time.
This commit is contained in:
Bruno BELANYI 2021-09-25 13:41:43 +02:00
parent dc5a44ce82
commit c7766afe90
2 changed files with 71 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

16
machines/porthos/services.nix
View file

@ -109,6 +109,22 @@ in
acme = {
credentialsFile = builtins.toFile "gandi-key.env" my.secrets.acme.key;
};
sso = {
authKeyFile = secrets."sso/auth-key".path;
users = {
ambroisie = {
passwordHashFile = builtins.toFile
"ambroisie-sso-pass.txt"
my.secrets.sso.ambroisie.passwordHash;
totpSecretFile = builtins.toFile
"ambroisie-sso-totp.txt"
my.secrets.sso.ambroisie.totpSecret;
};
};
groups = {
root = [ "ambroisie" ];
};
};
};
paperless = {
enable = true;