aynish/helm
1
0
Fork 0
Code Pull requests Packages Projects Releases Activity

make wallabag pure (no secrets :( )

Browse source
This commit is contained in:
Anish Lakhwara 2022-12-20 15:51:11 +10:00
parent 96473e4da5
commit efbaf0ff11
1 changed files with 7 additions and 14 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

21
hosts/profiles/wallabag/default.nix
View file

@ -1,15 +1,10 @@
{ pkgs, config, lib, ... }: { self, pkgs, config, lib, ... }:
let
wallabag-password = builtins.readFile "/run/agenix/wallabag_password";
wallabag-secret = builtins.readFile "/run/agenix/wallabag_secret";
in
{ {
age.secrets.wallabag-password.file = "/run/agenix/wallabag_password"; # age.secrets.wallabag-password.file = "${self}/secrets/wallabag-password.age";
age.secrets.wallabag-password.owner = "wallabag"; # age.secrets.wallabag-secret.file = "${self}/secrets/wallabag-secret.age";
age.secrets.wallabag-secret.file = "/run/agenix/wallabag_secret"; # age.secrets.wallabag-password.owner = "wallabag";
age.secrets.wallabag-secret.owner = "wallabag"; # age.secrets.wallabag-secret.owner = "wallabag";
services.postgresql = { services.postgresql = {
enable = true; enable = true;
package = pkgs.postgresql_11; package = pkgs.postgresql_11;
@ -36,8 +31,7 @@ in
database_port: ~ database_port: ~
database_name: wallabag database_name: wallabag
database_user: wallabag database_user: wallabag
# TODO agenix database_password: wallabag
database_password: ${wallabag-password}
# For SQLite, database_path should be "%kernel.project_dir%/data/db/wallabag.sqlite" # For SQLite, database_path should be "%kernel.project_dir%/data/db/wallabag.sqlite"
database_path: ~ database_path: ~
database_table_prefix: wallabag_ database_table_prefix: wallabag_
@ -59,8 +53,7 @@ in
locale: en locale: en
# A secret key that's used to generate certain security-related tokens # A secret key that's used to generate certain security-related tokens
# TODO agenix secret: SAFGOECRIlfal89oe6u0(*^dsaaih961
secret: ${wallabag-secret} SAFGOECRIlfal89oe6u0(*^dsaaih961
# two factor stuff # two factor stuff
twofactor_auth: true twofactor_auth: true