From 28f4be1bfa59e9a2b6f2f339afd624a494b047b6 Mon Sep 17 00:00:00 2001 From: infra Date: Mon, 3 Oct 2022 08:15:11 +0000 Subject: [PATCH] some more stuff, mostly book stack --- nixos/book-stack.nix | 7 ++++--- nixos/configuration.nix | 2 +- secrets/bookstack-app-file-key.age | 8 ++++++++ 3 files changed, 13 insertions(+), 4 deletions(-) create mode 100644 secrets/bookstack-app-file-key.age diff --git a/nixos/book-stack.nix b/nixos/book-stack.nix index f50cb37..c1cdb5f 100644 --- a/nixos/book-stack.nix +++ b/nixos/book-stack.nix @@ -1,13 +1,14 @@ { pkgs, ... }: { + age.secrets."bookstack-app-file-key".file = ../secrets/bookstack-app-file-key.age; + age.secrets."bookstack-app-file-key".owner = "bookstack"; services.bookstack = { enable = true; hostname = "wiki.sincerity.network"; - # appKeyFile = "/run/secrets/bookstack-app-key"; - appKeyFile = "/home/infra/app-key-file"; # TODO use agenix + appKeyFile = "/run/agenix/bookstack-app-file-key"; nginx = { - serverName = "wiki.mutualaid.work"; + serverName = "wiki.sincerity.network"; listenAddresses = [ "0.0.0.0" ]; forceSSL = true; enableACME = true; diff --git a/nixos/configuration.nix b/nixos/configuration.nix index cd81df9..311029a 100644 --- a/nixos/configuration.nix +++ b/nixos/configuration.nix @@ -7,7 +7,7 @@ # Import your generated (nixos-generate-config) hardware configuration ./hardware-configuration.nix ./vault-warden.nix - # ./book-stack.nix + ./book-stack.nix # ./bonfire.nix ./mumble.nix ]; diff --git a/secrets/bookstack-app-file-key.age b/secrets/bookstack-app-file-key.age new file mode 100644 index 0000000..f5081a7 --- /dev/null +++ b/secrets/bookstack-app-file-key.age @@ -0,0 +1,8 @@ +age-encryption.org/v1 +-> ssh-ed25519 gm2l9w rbcxQCRvrPZ8fpkJVAYORMvcZDW3W+U4cTffMgF4Jkc +GGq3QOlsKaZbSjlosCb3hDix2/BI6bLyriBTqZbAv6Y +-> $d-FD:-grease E =s% +UyDWgsHQwFtEQj4m7lBaHq9EH9LmZI8Z9/T5QUn9acYX9V0 +--- atlTfS4hkVQXzaWulmfSWdMuWgf4+ar7js2eFPz6V2g +rs{J #$4n?atm +ޓx&8v1?g&$1A0KoMj \ No newline at end of file