emenel/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

server

Browse source
This commit is contained in:
Matt Nish-Lapidus 2025-04-13 15:08:07 -04:00
parent 241dda6b44
commit 7cfbd927bd
2 changed files with 24 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

24
homes/emenel/secrets.yaml
View file

@ -7,22 +7,26 @@ taskchamp-id: ENC[AES256_GCM,data:Aou7f+fj8oeC+w3dmCfj1MP7RvSPzF5eRRz6cw99Nb1hJJ
taskchamp-key: ENC[AES256_GCM,data:9MAT3Q3Olw8JDA==,iv:5JBugxClwi+loeP6/7taRHAOzdpXMDMn5elwqUSKJus=,tag:Kt2wjRW90h8q3Nia7mIT5g==,type:str] taskchamp-key: ENC[AES256_GCM,data:9MAT3Q3Olw8JDA==,iv:5JBugxClwi+loeP6/7taRHAOzdpXMDMn5elwqUSKJus=,tag:Kt2wjRW90h8q3Nia7mIT5g==,type:str]
icloud: ENC[AES256_GCM,data:W1fk/XZYYM1fLZE=,iv:o7fPNUZJjYv+lLdizn01x7atYOQd/t9jk8ifXTJjuZY=,tag:7UWLpKUm/vV/rwg8c7M+rQ==,type:str] icloud: ENC[AES256_GCM,data:W1fk/XZYYM1fLZE=,iv:o7fPNUZJjYv+lLdizn01x7atYOQd/t9jk8ifXTJjuZY=,tag:7UWLpKUm/vV/rwg8c7M+rQ==,type:str]
sops: sops:
kms: []
gcp_kms: []
azure_kv: []
hc_vault: []
age: age:
- recipient: age10k8v6pfm3p7cmsgn6wu5ufpcquqgpvqh76l23xf326et55dacc0qlr8fe8 - recipient: age10k8v6pfm3p7cmsgn6wu5ufpcquqgpvqh76l23xf326et55dacc0qlr8fe8
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxM0J2TnF5ZHNETnNrWTlj YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvZERQcmQxM0NSdVpEdHhM
SEViczZqOHRuNThhUHF0bllVZTNnZDdtWnhVCnZxTkVGczRRTzlDUDF2TmtjUVMw akZhT2xOem83RFlWc0lyblVOWG1IaXZFRGtBCjJ2NlpkNWwwbXFEUjM1M1hUdE9x
QVV2cTYxS1d5QXU3aUNyajZWelUyQmcKLS0tIG1oYjU3M0pBL2lBUmN1cFoyTXdB S2tCVFNQYVdyemE3SDNPY3dVYmZONUUKLS0tIFlZSGZGSm0yV0E1VElCQW4rNmdo
RTk5RGdrZ3dGaXJIait5VG45bTFpQVkKFvq2714fyXnUlQ2ovZGVl55Wq9m/uvpC UXdWSzMrTjh6UHpwSVVJbzhtWGxkNkEK9sx6aJkTQtZNeZe74IQqZBvWdBP0tfy5
Q7k9SEOdSMNqioG5TR7yhGS+cCbcO+zV7WXxKB+mpwUmhkc13H0w5A== nKRaNSSU9hjuzaDcPzCAMtRpMJJrtTD8K3cHXQJvGnlI5Qt+mEYqZA==
-----END AGE ENCRYPTED FILE-----
- recipient: age1eg4u9d90r64a7gesg778cgx8pkcxkh4wjkddz299u6lelpc6yypsgza06c
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaTlBVMW83YStsUzMwYVB4
ajBuTDZUbHh1eTJ0QzdGV3BERWZrNER1UnpVCmRndHdBVTExQ081UElmN1oxY3Rp
dFdPMElUZWc4Tmo1ZnNwWWF4dEthaXcKLS0tIGc5S2oyQmZNRlFWQUVEU0NXRzU5
dWM4Ym9KQVlTME9MQitrNnNrUDBUeUEKCJe95n0berZpygwedi4TsNfxS7swVrOX
ACr2tDfFcjV4jhm1cltrm4o3lLV09gUFqUXUQo098d2pUZRlUX+pPQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2025-03-29T21:43:51Z" lastmodified: "2025-03-29T21:43:51Z"
mac: ENC[AES256_GCM,data:tOr5xkd8sJ6+qPPTvRbrVvznCR4kbhoMnqnim8uGmAmbAtFCU3sDCsAQUl5KZVEHz8W3bzYrhW2Qrm0EpSt6Hc7TohnT/aUgEj2eZW6cSKHP7ob2YA2BdG5gE39PAazFQ/CI/xkS2j+ioXZsJeis3//rfvVZa4EbJmuK5AnI+Fc=,iv:Kh8+Y+aMeVl0uQ46LklYkbYQABdWYy2VzuIAl18+NjE=,tag:Nh1wb2WHPg3Z4etk936rFg==,type:str] mac: ENC[AES256_GCM,data:tOr5xkd8sJ6+qPPTvRbrVvznCR4kbhoMnqnim8uGmAmbAtFCU3sDCsAQUl5KZVEHz8W3bzYrhW2Qrm0EpSt6Hc7TohnT/aUgEj2eZW6cSKHP7ob2YA2BdG5gE39PAazFQ/CI/xkS2j+ioXZsJeis3//rfvVZa4EbJmuK5AnI+Fc=,iv:Kh8+Y+aMeVl0uQ46LklYkbYQABdWYy2VzuIAl18+NjE=,tag:Nh1wb2WHPg3Z4etk936rFg==,type:str]
pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.9.4 version: 3.9.4

20
modules/system/forgejo.nix
View file

@ -45,15 +45,15 @@
# }; # };
}; };
# sops.secrets.forgejo-admin-password.owner = "forgejo"; sops.secrets.forgejoemenel.owner = "forgejo";
# systemd.services.forgejo.preStart = let systemd.services.forgejo.preStart = let
# adminCmd = "${lib.getExe pkgs.forgejo} admin user"; adminCmd = "${lib.getExe pkgs.forgejo} admin user";
# pwd = config.sops.secrets.forgejo-admin-password; pwd = config.sops.secrets.forgejoemenel;
# user = "emenel"; # Note, Forgejo doesn't allow creation of an account named "admin" user = "emenel"; # Note, Forgejo doesn't allow creation of an account named "admin"
# in '' in ''
# ${adminCmd} create --admin --email "root@localhost" --username ${user} --password "$(tr -d '\n' < ${pwd.path})" || true ${adminCmd} create --admin --email "root@localhost" --username ${user} --password "$(tr -d '\n' < ${pwd.path})" || true
# ## uncomment this line to change an admin user which was already created ## uncomment this line to change an admin user which was already created
# # ${adminCmd} change-password --username ${user} --password "$(tr -d '\n' < ${pwd.path})" || true # ${adminCmd} change-password --username ${user} --password "$(tr -d '\n' < ${pwd.path})" || true
# ''; '';
} }