yisroelbaum/home-server-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

adjust secrets permissions and remove db password

Browse source
This commit is contained in:
Yisroel Baum 2026-06-03 10:52:01 +03:00
parent 3bc76350ec
commit b6c309a2b3
Signed by: yisroelbaum
GPG key ID: 0FA60884F75520A9
2 changed files with 16 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

20
discourse.nix
View file

@ -13,20 +13,32 @@
passwordFile = "/run/secrets/discourse-admin-password";
username = "yisroeldbaum";
};
database.passwordFile = "/run/secrets/discourse-database-password";
database.ignorePostgresqlVersion = true;
hostname = "discourse.torahimderecheretz.com";
mail = {};
secretKeyBaseFile = "";
secretKeyBaseFile = "/run/secrets/discourse-secret-key";
siteSettings = {
required = {
title = "Torah Im Derech Eretz";
site_description = "A forum to discuss the ideas of Rav Shamshon Refael Hirsch";
};
};
};
sops.secrets = {
"discourse-admin-password" = {
sopsFile = ./secrets/discourseAdminPassword.yaml;
mode = "0400";
key = "password";
owner = "discourse";
group = "discourse";
};
"discourse-database-password" = {
sopsFile = ./secrets/discourseDbPassword.yaml;
"discourse-secret-key" = {
sopsFile = ./secrets/discourseSecretKey.yaml;
mode = "0400";
key = "key";
owner = "discourse";
group = "discourse";
};
};
}