aynish/helm
1
0
Fork 0
Code Pull requests Packages Projects Releases Activity

add gitea db pass to agenix

Browse source
This commit is contained in:
Anish Lakhwara 2022-12-13 01:07:12 +10:00
parent 7fbbe71a39
commit 5e82b2563c
3 changed files with 20 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
hosts/profiles/gitea/default.nix
View file

@ -1,6 +1,9 @@
{ config, lib, pkgs, ... }: { self, config, lib, pkgs, ... }:
{ {
age.secrets.gitea-dbpass.file = "${self}/secrets/gitea-dbpass.age";
age.secrets.gitea-dbpass.owner = "gitea";
services.gitea = { services.gitea = {
enable = true; enable = true;
appName = "Sealight Git Forge"; appName = "Sealight Git Forge";
@ -9,8 +12,7 @@
httpPort = 3001; httpPort = 3001;
database = { database = {
type = "postgres"; type = "postgres";
# passwordFile = "/run/secrets/gitea-dbpass"; # TODO supplied by agenix passwordFile = "/run/agenix/gitea-dbpass";
password = "somethingunknowablesorry";
}; };
settings = { settings = {
metrics = { metrics = {
@ -19,10 +21,11 @@
repository = { repository = {
DEFAULT_BRANCH = "main"; DEFAULT_BRANCH = "main";
}; };
# TODO
"markup.restructuredtext" = { "markup.restructuredtext" = {
ENABLED = true; ENABLED = true;
FILE_EXTENSIONS = ".rst"; FILE_EXTENSIONS = ".rst";
RENDER_COMMAND = "timeout 30s pandoc +RTS -M512M -RTS -f rst"; RENDER_COMMAND = "pandoc +RTS -M512M -RTS -f rst";
IS_INPUT_FILE = false; IS_INPUT_FILE = false;
}; };
# TODO # TODO

8
secrets/gitea-dbpass.age Normal file
View file

@ -0,0 +1,8 @@
age-encryption.org/v1
-> ssh-ed25519 kgCrKA /u5qYf6vYBVeJryLq2xvZHXk9LY2A8+ks/XV4C/fixw
HNLXInIHa2d/CZR8/OwwhfLurpEbxiXca8Ip3kp/EWg
-> s9b#/i%D-grease
DtUrN1QNHQyj0mSiV9nAOBpjf1/3yxxV4E4Xxr0oR2kJa/VWvpIYzyReZdRpS5Xs
Qf0Rw1HB9OAMAQ04DuR6FVfGYaGm
--- WszM9cCBr4HW0I+HltsdXj/BCxUDMld4yAVzXVo1HLg
4µEíàݾöGT/ÅCÁ°¸ƒªBñ’šrò©ø¢£XYëµW<C2B5>ÀfröÅý|e5÷÷}PÄ)

10
secrets/secrets.nix
View file

@ -21,9 +21,9 @@ in
"sealight-mod-password.age".publicKeys = [ lituus ]; "sealight-mod-password.age".publicKeys = [ lituus ];
"telegram-matrix-env.age".publicKeys = [ lituus ]; "telegram-matrix-env.age".publicKeys = [ lituus ];
# "wallabag.age".publicKeys = [ mossnet ]; "wallabag.age".publicKeys = [ mossnet ];
"woodpecker-agent-secret".publicKeys = [ lituus helix ]; "woodpecker-agent-secret.age".publicKeys = [ lituus helix ];
"woodpecker-client-id".publicKeys = [ helix ]; "woodpecker-client-id.age".publicKeys = [ helix ];
"woodpecker-client-secret".publicKeys = [ helix ]; "woodpecker-client-secret.age".publicKeys = [ helix ];
"gitea-dbpass".publicKeys = [ helix ]; "gitea-dbpass.age".publicKeys = [ helix ];
} }