yisroelbaum/home-server-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Compare commits

base: yisroelbaum:3bc76350ec19905aef1c31aaf1c522a87e1458b5
Branches Tags
yisroelbaum:master
...
compare: yisroelbaum:e401d1040f311d5521d57094d75b67e93e7b2393
Branches Tags
yisroelbaum:master

2 commits
3bc76350ec ... e401d1040f

Author SHA1 Message Date
Yisroel Baum
e401d1040f
add mail settings for discourse 2026-06-03 11:24:43 +03:00
Yisroel Baum
b6c309a2b3
adjust secrets permissions and remove db password 2026-06-03 10:52:01 +03:00
3 changed files with 52 additions and 22 deletions
Download patch file Download diff file Expand all files Collapse all files

42
discourse.nix
View file

@ -10,23 +10,53 @@
admin = {
email = "yisroel.d.baum@gmail.com";
fullName = "Yisroel Baum";
passwordFile = "/run/secrets/discourse-admin-password";
passwordFile = config.sops.secrets."discourse-admin-password".path;
username = "yisroeldbaum";
};
database.passwordFile = "/run/secrets/discourse-database-password";
database.ignorePostgresqlVersion = true;
hostname = "discourse.torahimderecheretz.com";
mail = {};
secretKeyBaseFile = "";
mail = {
notificationEmailAddress = "noreply@discourse.torahimderecheretz.com";
contactEmailAddress = "";
outgoing = {
serverAddress = "in-v3.mailjet.com";
port = 587;
username = "1ebdd73d944240c1a9c3201e52a1e8c6";
passwordFile = config.sops.secrets."discourse-mail-key".path;
authentication = "login";
};
};
secretKeyBaseFile = config.sops.secrets."discourse-secret-key".path;
siteSettings = {
required = {
title = "Torah Im Derech Eretz";
site_description = "A forum to discuss the ideas of Rav Shamshon Refael Hirsch";
};
};
};
sops.secrets = {
"discourse-admin-password" = {
sopsFile = ./secrets/discourseAdminPassword.yaml;
mode = "0400";
key = "password";
owner = "discourse";
group = "discourse";
};
"discourse-database-password" = {
sopsFile = ./secrets/discourseDbPassword.yaml;
"discourse-secret-key" = {
sopsFile = ./secrets/discourseSecretKey.yaml;
mode = "0400";
key = "key";
owner = "discourse";
group = "discourse";
};
"discourse-mail-key" = {
sopsFile = ./secrets/discourseMailKey.yaml;
mode = "0400";
key = "key";
owner = "discourse";
group = "discourse";
};
};
}

16
secrets/discourseDbPassword.yaml
View file

@ -1,16 +0,0 @@
password: ENC[AES256_GCM,data:MoZw9B6VrFAUItDr8m/n2GPUCEq3sbMkNowJ,iv:CA980ZplHFC/toPQGmEbRezORowkyJjg3erDXFJeXgI=,tag:+WbqAQej5lMEDplSTEz32w==,type:str]
sops:
age:
- recipient: age1haj8v88kjna6ttkdufjpyjcf478kyvclnpdc8jwh97ewhqcc9eqsgrku4v
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBERWtjZDJlRUtlTVBPL3R0
OXhXcTJrMzhVMXI0ajV4MmREa0Jpc0gzNEFrCm5kYW9udExWa3crUjY2ek5JVnVQ
MURJQzB5VjlCZi91NTF5VC9aRmZ3VzAKLS0tIE5FZ2g1RG5HdXNGZlA1VFg0YTJk
cGpibm1IT2FIQ204UjcxejdBQVFxWjgKgknlHGId4ZYuM0Je9ZkReDLMgAnOvzh8
qcQZKs2GYv1Gc5I/8H11SDtEdCeYAIjr4Brh65mRkuWr1yKX9y1QfA==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2026-06-02T18:00:36Z"
mac: ENC[AES256_GCM,data:mAMyieqkB3Yz5SsqeS5Cl3S161W4hKuDzmFDakMheUT/JqmGO6GezHohBuKFRrJwgE+ZdJHVRtNjGe61xrSA9/al9YFJiApx5OcEjvLEsciIE5Fmey6kpo9F5q2FqoS/cuOMTy/BRFZe4uzMwOJVfx6Ky0C513xnS7LysNcIDGo=,iv:G9EDxYdAkItQwehO2J8TJM9mJdwdNwpBUXLlI1152j0=,tag:zqTnuZBRzmZjoFZsBYKizQ==,type:str]
unencrypted_suffix: _unencrypted
version: 3.12.2

16
secrets/discourseMailKey.yaml Normal file
View file

@ -0,0 +1,16 @@
key: ENC[AES256_GCM,data:Flvbs7sRCQ3BtSJXWurmVA+QQmvSo/fxrOVJNalBjj8=,iv:ddmk1XCjvNRmmqGhZwOWDlYSkdKz3ryyQwrav/T6Oz8=,tag:DvSjwdK01UAvBL1mYCe7kA==,type:str]
sops:
age:
- recipient: age1haj8v88kjna6ttkdufjpyjcf478kyvclnpdc8jwh97ewhqcc9eqsgrku4v
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVUGFmM010b3NhdCtPME5O
RWRkUjF0akVEZVFtNkhZeUVSeWpWL3pKNG1nCllObGlPOTcrSyt1a2NCc0U4TVZM
cWVQbjJocEUySHFYaDFmNzllOGhuQWcKLS0tIHFJeFdUWENxK1RRSlhvSEI4NXlO
TG1wM1FTWjBBWHdHNnBUUE1kNWE4akUK1Ehv5kYNZrbf3m3vH5Oyy/g2mz8kIX8T
l2k1LbhUo3cNzIjkNM05RSrLZEBPItoo2nc9oTAPZiF1U/K76SMP6g==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2026-06-03T07:59:50Z"
mac: ENC[AES256_GCM,data:E4WwhOqUCmOBXwYUR5nFzth59F50KE7k88NkOBc6ERnX4b5joy0lmExenprH019UVJ/HSXOCWphUMwTat70uzwhaKBtlfa7AWmWyMa6zhIzxTsFagI4h1nWQP00uGb0MM3ULR3mcLtxXyTtZFWuY/d8ttdYBuv2oe29ikJTX610=,iv:gAZPLiYcNGq8LSEpIxDzDqdan+CJKyQ+SnQXHmponns=,tag:3tI0it3h6foT9W7zK3rmxg==,type:str]
unencrypted_suffix: _unencrypted
version: 3.12.2