add gitea db pass to agenix

This commit is contained in:
Anish Lakhwara 2022-12-13 01:07:12 +10:00
parent 7fbbe71a39
commit 5e82b2563c
3 changed files with 20 additions and 9 deletions

View file

@ -1,6 +1,9 @@
{ config, lib, pkgs, ... }:
{ self, config, lib, pkgs, ... }:
{
age.secrets.gitea-dbpass.file = "${self}/secrets/gitea-dbpass.age";
age.secrets.gitea-dbpass.owner = "gitea";
services.gitea = {
enable = true;
appName = "Sealight Git Forge";
@ -9,8 +12,7 @@
httpPort = 3001;
database = {
type = "postgres";
# passwordFile = "/run/secrets/gitea-dbpass"; # TODO supplied by agenix
password = "somethingunknowablesorry";
passwordFile = "/run/agenix/gitea-dbpass";
};
settings = {
metrics = {
@ -19,10 +21,11 @@
repository = {
DEFAULT_BRANCH = "main";
};
# TODO
"markup.restructuredtext" = {
ENABLED = true;
FILE_EXTENSIONS = ".rst";
RENDER_COMMAND = "timeout 30s pandoc +RTS -M512M -RTS -f rst";
RENDER_COMMAND = "pandoc +RTS -M512M -RTS -f rst";
IS_INPUT_FILE = false;
};
# TODO

8
secrets/gitea-dbpass.age Normal file
View file

@ -0,0 +1,8 @@
age-encryption.org/v1
-> ssh-ed25519 kgCrKA /u5qYf6vYBVeJryLq2xvZHXk9LY2A8+ks/XV4C/fixw
HNLXInIHa2d/CZR8/OwwhfLurpEbxiXca8Ip3kp/EWg
-> s9b#/i%D-grease
DtUrN1QNHQyj0mSiV9nAOBpjf1/3yxxV4E4Xxr0oR2kJa/VWvpIYzyReZdRpS5Xs
Qf0Rw1HB9OAMAQ04DuR6FVfGYaGm
--- WszM9cCBr4HW0I+HltsdXj/BCxUDMld4yAVzXVo1HLg
4µEíàݾöGT/ÅCÁ°¸ƒªBñšrò©ø¢£XYëµW<C2B5>ÀfröÅý|e5÷÷}PÄ)

View file

@ -21,9 +21,9 @@ in
"sealight-mod-password.age".publicKeys = [ lituus ];
"telegram-matrix-env.age".publicKeys = [ lituus ];
# "wallabag.age".publicKeys = [ mossnet ];
"woodpecker-agent-secret".publicKeys = [ lituus helix ];
"woodpecker-client-id".publicKeys = [ helix ];
"woodpecker-client-secret".publicKeys = [ helix ];
"gitea-dbpass".publicKeys = [ helix ];
"wallabag.age".publicKeys = [ mossnet ];
"woodpecker-agent-secret.age".publicKeys = [ lituus helix ];
"woodpecker-client-id.age".publicKeys = [ helix ];
"woodpecker-client-secret.age".publicKeys = [ helix ];
"gitea-dbpass.age".publicKeys = [ helix ];
}