32 lines
927 B
Nix
32 lines
927 B
Nix
{ config, ... }:
|
|
{
|
|
services.yisroelbaum-web = {
|
|
enable = true;
|
|
secretFiles = {
|
|
borgPassphrase = config.sops.secrets."borg-passphrase".path;
|
|
borgPrivateKey = config.sops.secrets."borg-private-key".path;
|
|
forgejoMailerUser = config.sops.secrets."forgejo-mailer-user".path;
|
|
forgejoMailerPassword = config.sops.secrets."forgejo-mailer-passwd".path;
|
|
rabbiGerziEnvironment = config.sops.secrets."rabbi-gerzi-env".path;
|
|
};
|
|
};
|
|
|
|
sops.secrets = {
|
|
"forgejo-mailer-user" = {
|
|
sopsFile = ./secrets/forgejo.yaml;
|
|
mode = "0400";
|
|
};
|
|
"forgejo-mailer-passwd" = {
|
|
sopsFile = ./secrets/forgejo.yaml;
|
|
mode = "0400";
|
|
};
|
|
"rabbi-gerzi-env" = {
|
|
sopsFile = ./secrets/rabbi-gerzi.env;
|
|
format = "dotenv";
|
|
key = "";
|
|
mode = "0400";
|
|
owner = config.services.rabbi-gerzi.user;
|
|
group = config.services.rabbi-gerzi.group;
|
|
};
|
|
};
|
|
}
|