add gitea db pass to agenix
This commit is contained in:
		
							parent
							
								
									7fbbe71a39
								
							
						
					
					
						commit
						5e82b2563c
					
				|  | @ -1,6 +1,9 @@ | ||||||
| { config, lib, pkgs, ... }: | { self, config, lib, pkgs, ... }: | ||||||
| 
 | 
 | ||||||
| { | { | ||||||
|  |   age.secrets.gitea-dbpass.file = "${self}/secrets/gitea-dbpass.age"; | ||||||
|  |   age.secrets.gitea-dbpass.owner = "gitea"; | ||||||
|  | 
 | ||||||
|   services.gitea = { |   services.gitea = { | ||||||
|     enable = true; |     enable = true; | ||||||
|     appName = "Sealight Git Forge"; |     appName = "Sealight Git Forge"; | ||||||
|  | @ -9,8 +12,7 @@ | ||||||
|     httpPort = 3001; |     httpPort = 3001; | ||||||
|     database = { |     database = { | ||||||
|       type = "postgres"; |       type = "postgres"; | ||||||
|       # passwordFile = "/run/secrets/gitea-dbpass"; # TODO supplied by agenix |       passwordFile = "/run/agenix/gitea-dbpass"; | ||||||
|       password = "somethingunknowablesorry"; |  | ||||||
|     }; |     }; | ||||||
|     settings = { |     settings = { | ||||||
|       metrics = { |       metrics = { | ||||||
|  | @ -19,10 +21,11 @@ | ||||||
|       repository = { |       repository = { | ||||||
|         DEFAULT_BRANCH = "main"; |         DEFAULT_BRANCH = "main"; | ||||||
|       }; |       }; | ||||||
|  |       # TODO | ||||||
|       "markup.restructuredtext" = { |       "markup.restructuredtext" = { | ||||||
|         ENABLED = true; |         ENABLED = true; | ||||||
|         FILE_EXTENSIONS = ".rst"; |         FILE_EXTENSIONS = ".rst"; | ||||||
|         RENDER_COMMAND = "timeout 30s pandoc +RTS -M512M -RTS -f rst"; |         RENDER_COMMAND = "pandoc +RTS -M512M -RTS -f rst"; | ||||||
|         IS_INPUT_FILE = false; |         IS_INPUT_FILE = false; | ||||||
|       }; |       }; | ||||||
|       # TODO  |       # TODO  | ||||||
|  |  | ||||||
							
								
								
									
										8
									
								
								secrets/gitea-dbpass.age
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										8
									
								
								secrets/gitea-dbpass.age
									
									
									
									
									
										Normal file
									
								
							|  | @ -0,0 +1,8 @@ | ||||||
|  | age-encryption.org/v1 | ||||||
|  | -> ssh-ed25519 kgCrKA /u5qYf6vYBVeJryLq2xvZHXk9LY2A8+ks/XV4C/fixw | ||||||
|  | HNLXInIHa2d/CZR8/OwwhfLurpEbxiXca8Ip3kp/EWg | ||||||
|  | -> s9b#/i%D-grease | ||||||
|  | DtUrN1QNHQyj0mSiV9nAOBpjf1/3yxxV4E4Xxr0oR2kJa/VWvpIYzyReZdRpS5Xs | ||||||
|  | Qf0Rw1HB9OAMAQ04DuR6FVfGYaGm | ||||||
|  | --- WszM9cCBr4HW0I+HltsdXj/BCxUDMld4yAVzXVo1HLg | ||||||
|  | 4µEíàݾöGT/ÅCÁ°¸ƒªBñ’šrò©ø¢£XYëµW<C2B5>ÀfröÅý|e5÷÷}PÄ) | ||||||
|  | @ -21,9 +21,9 @@ in | ||||||
|   "sealight-mod-password.age".publicKeys = [ lituus ]; |   "sealight-mod-password.age".publicKeys = [ lituus ]; | ||||||
|   "telegram-matrix-env.age".publicKeys = [ lituus ]; |   "telegram-matrix-env.age".publicKeys = [ lituus ]; | ||||||
| 
 | 
 | ||||||
|   # "wallabag.age".publicKeys = [ mossnet ]; |   "wallabag.age".publicKeys = [ mossnet ]; | ||||||
|   "woodpecker-agent-secret".publicKeys = [ lituus helix ]; |   "woodpecker-agent-secret.age".publicKeys = [ lituus helix ]; | ||||||
|   "woodpecker-client-id".publicKeys = [ helix ]; |   "woodpecker-client-id.age".publicKeys = [ helix ]; | ||||||
|   "woodpecker-client-secret".publicKeys = [ helix ]; |   "woodpecker-client-secret.age".publicKeys = [ helix ]; | ||||||
|   "gitea-dbpass".publicKeys = [ helix ]; |   "gitea-dbpass.age".publicKeys = [ helix ]; | ||||||
| } | } | ||||||
|  |  | ||||||
		Loading…
	
		Reference in a new issue