make wallabag pure (no secrets :( )
This commit is contained in:
		
							parent
							
								
									96473e4da5
								
							
						
					
					
						commit
						efbaf0ff11
					
				|  | @ -1,15 +1,10 @@ | ||||||
| { pkgs, config, lib, ... }: | { self, pkgs, config, lib, ... }: | ||||||
| 
 | 
 | ||||||
| let |  | ||||||
|   wallabag-password = builtins.readFile "/run/agenix/wallabag_password"; |  | ||||||
|   wallabag-secret = builtins.readFile "/run/agenix/wallabag_secret"; |  | ||||||
| in |  | ||||||
| { | { | ||||||
|   age.secrets.wallabag-password.file = "/run/agenix/wallabag_password"; |   # age.secrets.wallabag-password.file = "${self}/secrets/wallabag-password.age"; | ||||||
|   age.secrets.wallabag-password.owner = "wallabag"; |   # age.secrets.wallabag-secret.file = "${self}/secrets/wallabag-secret.age"; | ||||||
|   age.secrets.wallabag-secret.file = "/run/agenix/wallabag_secret"; |   # age.secrets.wallabag-password.owner = "wallabag"; | ||||||
|   age.secrets.wallabag-secret.owner = "wallabag"; |   # age.secrets.wallabag-secret.owner = "wallabag"; | ||||||
| 
 |  | ||||||
|   services.postgresql = { |   services.postgresql = { | ||||||
|     enable = true; |     enable = true; | ||||||
|     package = pkgs.postgresql_11; |     package = pkgs.postgresql_11; | ||||||
|  | @ -36,8 +31,7 @@ in | ||||||
|           database_port: ~ |           database_port: ~ | ||||||
|           database_name: wallabag |           database_name: wallabag | ||||||
|           database_user: wallabag |           database_user: wallabag | ||||||
|           # TODO agenix |           database_password: wallabag  | ||||||
|           database_password: ${wallabag-password} |  | ||||||
|           # For SQLite, database_path should be "%kernel.project_dir%/data/db/wallabag.sqlite" |           # For SQLite, database_path should be "%kernel.project_dir%/data/db/wallabag.sqlite" | ||||||
|           database_path: ~ |           database_path: ~ | ||||||
|           database_table_prefix: wallabag_ |           database_table_prefix: wallabag_ | ||||||
|  | @ -59,8 +53,7 @@ in | ||||||
|           locale: en |           locale: en | ||||||
| 
 | 
 | ||||||
|           # A secret key that's used to generate certain security-related tokens |           # A secret key that's used to generate certain security-related tokens | ||||||
|           # TODO agenix |           secret: SAFGOECRIlfal89oe6u0(*^dsaaih961 | ||||||
|           secret: ${wallabag-secret} SAFGOECRIlfal89oe6u0(*^dsaaih961 |  | ||||||
| 
 | 
 | ||||||
|           # two factor stuff |           # two factor stuff | ||||||
|           twofactor_auth: true |           twofactor_auth: true | ||||||
|  |  | ||||||
		Loading…
	
		Reference in a new issue