 Bruno BELANYI
|
55541abd17
|
modules: secrets: fix permission for grafana
|
2021-09-26 23:09:33 +02:00 |
|
|
Bruno BELANYI
|
b9786398a7
|
modules: secrets: fix permission of 'matrix/mail'
|
2021-09-26 23:09:33 +02:00 |
|
|
Bruno BELANYI
|
5fd82472bf
|
modules: secrets: add 'owner' logic
|
2021-09-26 23:09:33 +02:00 |
|
|
Bruno BELANYI
|
8968e30e62
|
modules: secrets: remove 'with lib;'
|
2021-09-26 23:09:33 +02:00 |
|
|
Bruno BELANYI
|
0b580b61e7
|
secrets: move into 'modules'
|
2021-09-26 23:09:33 +02:00 |
|
|
Bruno BELANYI
|
c32be8ac02
|
project: bootstrap: retrieve agenix key
|
2021-09-26 23:09:33 +02:00 |
|
|
Bruno BELANYI
|
8eef7c260e
|
ci: use 'nix flake check'
Now that I am using agenix, secrets stays encrypted at rest.
|
2021-09-26 23:09:33 +02:00 |
|
|
Bruno BELANYI
|
172e29db69
|
flake: remove 'git-crypt'
|
2021-09-26 23:09:33 +02:00 |
|
|
Bruno BELANYI
|
3d0d19d9a1
|
secrets: remove git-crypt
|
2021-09-26 23:09:33 +02:00 |
|
|
Bruno BELANYI
|
e64fdcf38b
|
secrets: remove git-crypt secrets
|
2021-09-26 23:09:33 +02:00 |
|
|
Bruno BELANYI
|
414c27ee63
|
modules: services: nginx: sso: use runtime secrets
|
2021-09-26 23:09:33 +02:00 |
|
|
Bruno BELANYI
|
7257f3156e
|
machines: porthos: services: switch to agenix
The prep-work should be done now, time to hit the switch.
|
2021-09-26 23:09:32 +02:00 |
|
|
Bruno BELANYI
|
c7766afe90
|
modules: services: nginx: allow sso secret files
This is in preparation of the migration to agenix, which does not allow
access to the secrets at build time.
|
2021-09-26 23:09:32 +02:00 |
|
|
Bruno BELANYI
|
dc5a44ce82
|
home: put modules into folders
|
2021-09-26 23:09:32 +02:00 |
|
|
Bruno BELANYI
|
5b0e0bcbc2
|
home: terminal: put modules into folders
|
2021-09-26 23:09:32 +02:00 |
|
|
Bruno BELANYI
|
b90629fdd9
|
home: x: put modules into folders
|
2021-09-26 23:09:32 +02:00 |
|
|
Bruno BELANYI
|
acc23ab684
|
home: wm: put modules into folders
|
2021-09-26 23:09:32 +02:00 |
|
|
Bruno BELANYI
|
544aec0d91
|
home: mail: put modules into folders
|
2021-09-26 23:09:32 +02:00 |
|
|
Bruno BELANYI
|
a12b629dc3
|
home: firefox: put modules into folders
|
2021-09-26 23:09:32 +02:00 |
|
|
Bruno BELANYI
|
f61f11ba29
|
profiles: put modules into folders
|
2021-09-26 23:09:32 +02:00 |
|
|
Bruno BELANYI
|
b46b918295
|
modules: services: drone: split into files
This is cleaner to read.
|
2021-09-26 23:09:32 +02:00 |
|
|
Bruno BELANYI
|
ac90c5b11a
|
modules: services: put modules into folders
|
2021-09-26 23:09:32 +02:00 |
|
|
Bruno BELANYI
|
836b54b8eb
|
modules: hardware: put modules into folders
|
2021-09-26 23:09:32 +02:00 |
|
|
Bruno BELANYI
|
7bec7ae0f9
|
modules: system: put modules into folders
|
2021-09-26 23:09:32 +02:00 |
|
|
Bruno BELANYI
|
d5b09c48ef
|
modules: programs: put modules into folders
|
2021-09-26 23:09:32 +02:00 |
|
|
Bruno BELANYI
|
c88fa91671
|
modules: home: put into folder
|
2021-09-26 23:09:32 +02:00 |
|
|
Bruno BELANYI
|
f09ba6b5be
|
machines: porthos: users: use clear-text ssh key
|
2021-09-26 23:09:32 +02:00 |
|
|
Bruno BELANYI
|
33d539ed4f
|
modules: system: users: use agenix secrets
|
2021-09-26 23:09:32 +02:00 |
|
|
Bruno BELANYI
|
91abacd0f6
|
modules: services: wireguard: use agenix secrets
|
2021-09-26 23:09:32 +02:00 |
|
|
Bruno BELANYI
|
16d3cd9f81
|
modules: services: nginx: use 'credentialsFile'
In preparation for the migration to agenix.
|
2021-09-26 23:09:32 +02:00 |
|
|
Bruno BELANYI
|
7d37701811
|
modules: services: matrix: use 'mailConfigFile'
In preparation of the migration to agenix.
|
2021-09-26 23:09:32 +02:00 |
|
|
Bruno BELANYI
|
4643690b43
|
modules: services: paperless: use 'secretKeyFile'
In preparation for the migration to agenix.
|
2021-09-26 23:09:32 +02:00 |
|
|
Bruno BELANYI
|
5579baecfb
|
modules: services: nextcloud: use 'credentialsfile'
In preparation for the migration to agenix.
|
2021-09-26 23:09:32 +02:00 |
|
|
Bruno BELANYI
|
9d8da4d2b2
|
modules: services: miniflux: use 'credentialsFiles'
In preparation for the migration to agenix.
|
2021-09-26 23:09:32 +02:00 |
|
|
Bruno BELANYI
|
da63787874
|
modules: services: transmission: secrets w/ file
In preparation for the migration to using agenix.
|
2021-09-26 23:09:31 +02:00 |
|
|
Bruno BELANYI
|
98034a5410
|
secrets: register agenix secrets automatically
|
2021-09-26 23:09:31 +02:00 |
|
|
Bruno BELANYI
|
8664781da7
|
secrets: migrate to agenix
It is finally time to graduate to an actually secure, stateless
solution.
|
2021-09-26 23:09:31 +02:00 |
|
|
Bruno BELANYI
|
abf526ae3c
|
secrets: import 'agenix' module
|
2021-09-25 13:31:43 +02:00 |
|
|
Bruno BELANYI
|
7273f2102a
|
flake: add 'agenix'
|
2021-09-25 13:30:51 +02:00 |
|
|
Bruno BELANYI
|
963c86c66f
|
home: remove unused 'secrets' module
|
2021-09-25 13:27:01 +02:00 |
|
|
Bruno BELANYI
|
f3519e845f
|
home: ssh: add missing 'mkIf cfg.enable'
|
2021-09-24 01:21:57 +02:00 |
|
|
Bruno BELANYI
|
8ba1746be4
|
home: remove unused arguments
|
2021-09-24 01:21:57 +02:00 |
|
|
Bruno BELANYI
|
313b0c23a9
|
modules: remove unused arguments
|
2021-09-24 01:21:57 +02:00 |
|
|
Bruno BELANYI
|
176d95d890
|
machines: remove unused arguments
|
2021-09-24 01:21:57 +02:00 |
|
|
Bruno BELANYI
|
b398481ba3
|
pkgs: remove unused arguments
|
2021-09-24 01:21:57 +02:00 |
|
|
Bruno BELANYI
|
d813d85af8
|
lib: remove 'with self;'
|
2021-09-24 01:21:57 +02:00 |
|
|
Bruno BELANYI
|
9473cff408
|
lib: modules: refactor 'mapModules'
Introduce the recursive version of this function, then refactor to
reduce repetition.
|
2021-09-24 01:21:57 +02:00 |
|
|
Bruno BELANYI
|
2b0b6f2004
|
lib: modules: document 'mapModules'
|
2021-09-24 00:26:28 +02:00 |
|
|
Bruno BELANYI
|
8852699c9a
|
modules: services: nginx: use 'recursiveMerge'
|
2021-09-23 22:11:25 +02:00 |
|
|
Bruno BELANYI
|
364ea0404a
|
home: wm: i3: use 'recursiveMerge'
|
2021-09-23 22:11:25 +02:00 |
|