aynish/helm
1
0
Fork 0
Code Pull requests Packages Projects Releases Activity

make wallabag pure (no secrets :( )

Browse source
This commit is contained in:
Anish Lakhwara 2022-12-20 15:51:11 +10:00
parent 96473e4da5
commit efbaf0ff11
1 changed files with 7 additions and 14 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

21
hosts/profiles/wallabag/default.nix
View file

@ -1,15 +1,10 @@
{ pkgs, config, lib, ... }:
{ self, pkgs, config, lib, ... }:
let
wallabag-password = builtins.readFile "/run/agenix/wallabag_password";
wallabag-secret = builtins.readFile "/run/agenix/wallabag_secret";
in
{
age.secrets.wallabag-password.file = "/run/agenix/wallabag_password";
age.secrets.wallabag-password.owner = "wallabag";
age.secrets.wallabag-secret.file = "/run/agenix/wallabag_secret";
age.secrets.wallabag-secret.owner = "wallabag";
# age.secrets.wallabag-password.file = "${self}/secrets/wallabag-password.age";
# age.secrets.wallabag-secret.file = "${self}/secrets/wallabag-secret.age";
# age.secrets.wallabag-password.owner = "wallabag";
# age.secrets.wallabag-secret.owner = "wallabag";
services.postgresql = {
enable = true;
package = pkgs.postgresql_11;
@ -36,8 +31,7 @@ in
database_port: ~
database_name: wallabag
database_user: wallabag
# TODO agenix
database_password: ${wallabag-password}
database_password: wallabag
# For SQLite, database_path should be "%kernel.project_dir%/data/db/wallabag.sqlite"
database_path: ~
database_table_prefix: wallabag_
@ -59,8 +53,7 @@ in
locale: en
# A secret key that's used to generate certain security-related tokens
# TODO agenix
secret: ${wallabag-secret} SAFGOECRIlfal89oe6u0(*^dsaaih961
secret: SAFGOECRIlfal89oe6u0(*^dsaaih961
# two factor stuff
twofactor_auth: true