move yisroelbaum web stack into module

This commit is contained in:
Yisroel Baum 2026-07-31 11:30:25 +03:00
parent 5406f8c991
commit 92d6e4bad7
Signed by: yisroelbaum
GPG key ID: 0FA60884F75520A9
8 changed files with 81 additions and 204 deletions

32
yisroelbaum-web.nix Normal file
View file

@ -0,0 +1,32 @@
{ config, ... }:
{
services.yisroelbaum-web = {
enable = true;
secretFiles = {
borgPassphrase = config.sops.secrets."borg-passphrase".path;
borgPrivateKey = config.sops.secrets."borg-private-key".path;
forgejoMailerUser = config.sops.secrets."forgejo-mailer-user".path;
forgejoMailerPassword = config.sops.secrets."forgejo-mailer-passwd".path;
rabbiGerziEnvironment = config.sops.secrets."rabbi-gerzi-env".path;
};
};
sops.secrets = {
"forgejo-mailer-user" = {
sopsFile = ./secrets/forgejo.yaml;
mode = "0400";
};
"forgejo-mailer-passwd" = {
sopsFile = ./secrets/forgejo.yaml;
mode = "0400";
};
"rabbi-gerzi-env" = {
sopsFile = ./secrets/rabbi-gerzi.env;
format = "dotenv";
key = "";
mode = "0400";
owner = config.services.rabbi-gerzi.user;
group = config.services.rabbi-gerzi.group;
};
};
}