wire tide service into nixos config

Imports the tide nixos module from the TIDE flake and configures
it for tide.yisroelbaum.com (frontend) and apitide.yisroelbaum.com
(backend), reusing the existing wildcard ACME cert. Secrets are
pulled from sops-encrypted secrets/tide.yaml; replace the
placeholder with real encrypted content before deploy.
This commit is contained in:
Yisroel Baum 2026-05-08 10:56:13 +03:00
parent b7716061e4
commit d195c6b37c
4 changed files with 75 additions and 0 deletions

3
secrets/tide.yaml Normal file
View file

@ -0,0 +1,3 @@
# PLACEHOLDER - replace with sops-encrypted content before deploy.
# See secrets/README.md and secrets/tide.yaml.example.
tide-env: ""