yisroelbaum/home-server-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

wire tide service into nixos config

Browse source 
Imports the tide nixos module from the TIDE flake and configures
it for tide.yisroelbaum.com (frontend) and apitide.yisroelbaum.com
(backend), reusing the existing wildcard ACME cert. Secrets are
pulled from sops-encrypted secrets/tide.yaml; replace the
placeholder with real encrypted content before deploy.
This commit is contained in:
Yisroel Baum 2026-05-08 10:56:13 +03:00
parent b7716061e4
commit d195c6b37c
4 changed files with 75 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

20
secrets/tide.yaml.example Normal file
View file

@ -0,0 +1,20 @@
# Encrypt this with sops to produce ./tide.yaml:
#
# sops --encrypt --age $(cat ~/.config/sops/age/keys.txt | grep public | cut -d: -f2 | tr -d ' ') \
# secrets/tide.yaml.example > secrets/tide.yaml
#
# Or set up .sops.yaml with the host's age public key and run
# `sops secrets/tide.yaml`.
#
# Generate APP_KEY with:
# php -r "echo 'base64:'.base64_encode(random_bytes(32)).PHP_EOL;"
tide-env: |
APP_KEY=base64:REPLACE_ME
DB_PASSWORD=REPLACE_ME
MAIL_HOST=127.0.0.1
MAIL_PORT=1025
MAIL_USERNAME=
MAIL_PASSWORD=
MAIL_FROM_ADDRESS=noreply@tide.yisroelbaum.com
MAIL_FROM_NAME=TIDE