yisroelbaum/home-server-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
home-server-config/secrets
History
Yisroel Baum bf009cbcdd
configure rabbi gerzi
2026-07-02 11:51:07 +03:00
..
borgbackup.yaml add borgbackup to forgejo 2026-06-11 21:58:04 +03:00
discourseAdminPassword.yaml init discourse config 2026-06-03 08:43:20 +03:00
discourseMailKey.yaml add mail settings for discourse 2026-06-03 11:24:43 +03:00
discourseSecretKey.yaml init discourse config 2026-06-03 08:43:20 +03:00
forgejo.yaml add mailer creds for forgejo 2026-05-14 10:05:41 +03:00
README.md configure rabbi gerzi 2026-07-02 11:51:07 +03:00
tide.yaml update tide and secrets with mailjet config 2026-05-11 10:38:59 +03:00
tide.yaml.example wire tide service into nixos config 2026-05-08 10:56:13 +03:00

README.md

Secrets

Encrypted with sops using the host's age key.

First-time setup on the server

  1. Generate an age key for the host: 
    sudo mkdir -p /var/lib/sops-nix
sudo age-keygen -o /var/lib/sops-nix/key.txt
sudo chmod 600 /var/lib/sops-nix/key.txt
  2. Read the public key: 
    sudo grep "public key" /var/lib/sops-nix/key.txt
  3. On a workstation, put that public key into .sops.yaml at the repo root and encrypt tide.yaml.example into tide.yaml.

tide.yaml is encrypted and committed. tide.yaml.example is the plaintext template.

Rabbi Gerzi

Create rabbi-gerzi.env as a SOPS-encrypted dotenv file with:

APP_KEY=base64:...
RABBI_GERZI_INITIAL_ADMIN_EMAIL=...
RABBI_GERZI_INITIAL_ADMIN_PASSWORD=...