make wallabag pure (no secrets :( )
This commit is contained in:
		
							parent
							
								
									96473e4da5
								
							
						
					
					
						commit
						efbaf0ff11
					
				|  | @ -1,15 +1,10 @@ | |||
| { pkgs, config, lib, ... }: | ||||
| { self, pkgs, config, lib, ... }: | ||||
| 
 | ||||
| let | ||||
|   wallabag-password = builtins.readFile "/run/agenix/wallabag_password"; | ||||
|   wallabag-secret = builtins.readFile "/run/agenix/wallabag_secret"; | ||||
| in | ||||
| { | ||||
|   age.secrets.wallabag-password.file = "/run/agenix/wallabag_password"; | ||||
|   age.secrets.wallabag-password.owner = "wallabag"; | ||||
|   age.secrets.wallabag-secret.file = "/run/agenix/wallabag_secret"; | ||||
|   age.secrets.wallabag-secret.owner = "wallabag"; | ||||
| 
 | ||||
|   # age.secrets.wallabag-password.file = "${self}/secrets/wallabag-password.age"; | ||||
|   # age.secrets.wallabag-secret.file = "${self}/secrets/wallabag-secret.age"; | ||||
|   # age.secrets.wallabag-password.owner = "wallabag"; | ||||
|   # age.secrets.wallabag-secret.owner = "wallabag"; | ||||
|   services.postgresql = { | ||||
|     enable = true; | ||||
|     package = pkgs.postgresql_11; | ||||
|  | @ -36,8 +31,7 @@ in | |||
|           database_port: ~ | ||||
|           database_name: wallabag | ||||
|           database_user: wallabag | ||||
|           # TODO agenix | ||||
|           database_password: ${wallabag-password} | ||||
|           database_password: wallabag  | ||||
|           # For SQLite, database_path should be "%kernel.project_dir%/data/db/wallabag.sqlite" | ||||
|           database_path: ~ | ||||
|           database_table_prefix: wallabag_ | ||||
|  | @ -59,8 +53,7 @@ in | |||
|           locale: en | ||||
| 
 | ||||
|           # A secret key that's used to generate certain security-related tokens | ||||
|           # TODO agenix | ||||
|           secret: ${wallabag-secret} SAFGOECRIlfal89oe6u0(*^dsaaih961 | ||||
|           secret: SAFGOECRIlfal89oe6u0(*^dsaaih961 | ||||
| 
 | ||||
|           # two factor stuff | ||||
|           twofactor_auth: true | ||||
|  |  | |||
		Loading…
	
		Reference in a new issue