move yisroelbaum web stack into module
This commit is contained in:
parent
5406f8c991
commit
92d6e4bad7
8 changed files with 81 additions and 204 deletions
32
yisroelbaum-web.nix
Normal file
32
yisroelbaum-web.nix
Normal file
|
|
@ -0,0 +1,32 @@
|
|||
{ config, ... }:
|
||||
{
|
||||
services.yisroelbaum-web = {
|
||||
enable = true;
|
||||
secretFiles = {
|
||||
borgPassphrase = config.sops.secrets."borg-passphrase".path;
|
||||
borgPrivateKey = config.sops.secrets."borg-private-key".path;
|
||||
forgejoMailerUser = config.sops.secrets."forgejo-mailer-user".path;
|
||||
forgejoMailerPassword = config.sops.secrets."forgejo-mailer-passwd".path;
|
||||
rabbiGerziEnvironment = config.sops.secrets."rabbi-gerzi-env".path;
|
||||
};
|
||||
};
|
||||
|
||||
sops.secrets = {
|
||||
"forgejo-mailer-user" = {
|
||||
sopsFile = ./secrets/forgejo.yaml;
|
||||
mode = "0400";
|
||||
};
|
||||
"forgejo-mailer-passwd" = {
|
||||
sopsFile = ./secrets/forgejo.yaml;
|
||||
mode = "0400";
|
||||
};
|
||||
"rabbi-gerzi-env" = {
|
||||
sopsFile = ./secrets/rabbi-gerzi.env;
|
||||
format = "dotenv";
|
||||
key = "";
|
||||
mode = "0400";
|
||||
owner = config.services.rabbi-gerzi.user;
|
||||
group = config.services.rabbi-gerzi.group;
|
||||
};
|
||||
};
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue