yisroelbaum/home-server-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

init discourse config

Browse source 
includes admin, database, hostname, and secrets.
This commit is contained in:
Yisroel Baum 2026-06-03 08:42:08 +03:00
parent 52bacab3e6
commit 21e2d38ea4
Signed by: yisroelbaum
GPG key ID: 0FA60884F75520A9
4 changed files with 80 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

32
discourse.nix Normal file
View file

@ -0,0 +1,32 @@
{
config,
lib,
pkgs,
...
}:
{
services.discourse = {
enable = true;
admin = {
email = "yisroel.d.baum@gmail.com";
fullName = "Yisroel Baum";
passwordFile = "/run/secrets/discourse-admin-password";
username = "yisroeldbaum";
};
database.passwordFile = "/run/secrets/discourse-database-password";
hostname = "discourse.torahimderecheretz.com";
mail = {};
secretKeyBaseFile = "";
};
sops.secrets = {
"discourse-admin-password" = {
sopsFile = ./secrets/discourseAdminPassword.yaml;
mode = "0400";
};
"discourse-database-password" = {
sopsFile = ./secrets/discourseDbPassword.yaml;
mode = "0400";
};
};
}

16
secrets/discourseAdminPassword.yaml Normal file
View file

@ -0,0 +1,16 @@
password: ENC[AES256_GCM,data:6/a9U7I2joMSkfiysYgMrBN3AE3DRUjQsZw=,iv:EDeN/IClY/yNkVi/FLiTeeOjkj5Df/1l4XXzf5STot0=,tag:8uoXPXJuL4JlMGzgtK6D+w==,type:str]
sops:
age:
- recipient: age1haj8v88kjna6ttkdufjpyjcf478kyvclnpdc8jwh97ewhqcc9eqsgrku4v
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvYWtUZ2JYU3VNaHQ1bXVL
V0ZmRVIxVDg2SE5GcU5UMTZjcnVOUlBZOHlzCjc5elV3bk54ak05WStvNGUvNCtP
aVNJT0tFTVFMb2NKTlpValJ6YWFVcEEKLS0tIDlEUjRncWFsUGptZTBmSm1idm0z
ZUgxUHhvejMreHUrbDVwTkxwOE1DSkUK62qiTlgQvKruDj3Bh/8nJH+5CBl+fzbJ
q5ryzSfTpEcSfBwRENqIOYMOTjzr+y+JGymjokc9rCYb0NPQUFpHzg==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2026-06-02T18:00:59Z"
mac: ENC[AES256_GCM,data:H/+voyLLpsGxgTNjN96PL+I1tpW8Ylo+mWVTbsaUMnnOZIkfA81MzEjtdWOs0Pg4AysAeMbmJUob+gTtSfcqnVvhv/FBVHuPji+Vz0cj0TM8k7oLlaIgeL/MAZ1mhrxDIUK5pQYSVnaaWrQ43Z4DeqaboDY7feUOp8n6emICo5I=,iv:dCPOGBC80ZtM0ObeRRMAGH2f4K5zFtckaxKAJZll8yI=,tag:xwBJzExJXAw0T39hPdmgRw==,type:str]
unencrypted_suffix: _unencrypted
version: 3.12.2

16
secrets/discourseDbPassword.yaml Normal file
View file

@ -0,0 +1,16 @@
password: ENC[AES256_GCM,data:MoZw9B6VrFAUItDr8m/n2GPUCEq3sbMkNowJ,iv:CA980ZplHFC/toPQGmEbRezORowkyJjg3erDXFJeXgI=,tag:+WbqAQej5lMEDplSTEz32w==,type:str]
sops:
age:
- recipient: age1haj8v88kjna6ttkdufjpyjcf478kyvclnpdc8jwh97ewhqcc9eqsgrku4v
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBERWtjZDJlRUtlTVBPL3R0
OXhXcTJrMzhVMXI0ajV4MmREa0Jpc0gzNEFrCm5kYW9udExWa3crUjY2ek5JVnVQ
MURJQzB5VjlCZi91NTF5VC9aRmZ3VzAKLS0tIE5FZ2g1RG5HdXNGZlA1VFg0YTJk
cGpibm1IT2FIQ204UjcxejdBQVFxWjgKgknlHGId4ZYuM0Je9ZkReDLMgAnOvzh8
qcQZKs2GYv1Gc5I/8H11SDtEdCeYAIjr4Brh65mRkuWr1yKX9y1QfA==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2026-06-02T18:00:36Z"
mac: ENC[AES256_GCM,data:mAMyieqkB3Yz5SsqeS5Cl3S161W4hKuDzmFDakMheUT/JqmGO6GezHohBuKFRrJwgE+ZdJHVRtNjGe61xrSA9/al9YFJiApx5OcEjvLEsciIE5Fmey6kpo9F5q2FqoS/cuOMTy/BRFZe4uzMwOJVfx6Ky0C513xnS7LysNcIDGo=,iv:G9EDxYdAkItQwehO2J8TJM9mJdwdNwpBUXLlI1152j0=,tag:zqTnuZBRzmZjoFZsBYKizQ==,type:str]
unencrypted_suffix: _unencrypted
version: 3.12.2

16
secrets/discourseSecretKey.yaml Normal file
View file

@ -0,0 +1,16 @@
key: ENC[AES256_GCM,data:lZXbXrorH/GGGg93WgnG6GlzNs0NEy0BlForhgKlwllsf2uJWnBukQDDxxI6gUWMp+Uzc3e9plrmGbM7HQfsccDoQux7kJjGdt5CJgou0eh4J8WGw51M+beixVdF6UuCFFiuLERstzpIP1jhmyDfLZjMVTwfoRe0/YP52Ljgl2Y=,iv:pShAMIXtbEuV7Y2o+3NgTIbPPaoZvx9qF7lj60LMabw=,tag:P6vnrqWzJXXhUl+sJrY2gw==,type:str]
sops:
age:
- recipient: age1haj8v88kjna6ttkdufjpyjcf478kyvclnpdc8jwh97ewhqcc9eqsgrku4v
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlTHF2cGFIQXE2UDJhaVZX
KzhXcWNPbW0zYjBPbTVReUJKOW1ReEt5ZFFNCjFnU25UVVY5eXFyaFFMbkI1NHZ5
WHRIZ1pYT1ZVWUFJc2hrcGtYTndPdVEKLS0tIHZUSzkxUjEvU0kzRG93Vnc1ZGQz
WGZ3U2dvYmFIVlYvZ3c1Q2JsQkNGek0KGYlQEPskcDN2VxkHskctCTIjPjse1wLL
6VcEuidu69gkMqvDXR4bmnt8hxSqdH6OS3qEuDfLpqndjfCh//4CDw==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2026-06-02T18:08:12Z"
mac: ENC[AES256_GCM,data:jYec4f5lr8jYCVvzpM2a3lpIILOTKauz1DNuDIclL7kGA2QXJhW1njXKhmp/VCVbZLfoHCJk6SHyMcxUcx6HXtmc7FAVpu5+Vc/9N+D3gKlyXewDeC41CFdZ7GU0vtoVQK3KQe82rWl+6SRCWXeqLfmRlh7/pLwZy+bj20kG0XY=,iv:sIYEumkyDVrWZRVZpFPtrM96p82rtxW870LRkpHFsPY=,tag:Ey9L21LN+2HjCReuoqJtKQ==,type:str]
unencrypted_suffix: _unencrypted
version: 3.12.2