aynish/sincerity.network
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

some more stuff, mostly book stack

Browse source
This commit is contained in:
infra 2022-10-03 08:15:11 +00:00
parent 6595ad0bfc
commit 28f4be1bfa
3 changed files with 13 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
nixos/book-stack.nix
View file

@ -1,13 +1,14 @@
{ pkgs, ... }: { pkgs, ... }:
{ {
age.secrets."bookstack-app-file-key".file = ../secrets/bookstack-app-file-key.age;
age.secrets."bookstack-app-file-key".owner = "bookstack";
services.bookstack = { services.bookstack = {
enable = true; enable = true;
hostname = "wiki.sincerity.network"; hostname = "wiki.sincerity.network";
# appKeyFile = "/run/secrets/bookstack-app-key"; appKeyFile = "/run/agenix/bookstack-app-file-key";
appKeyFile = "/home/infra/app-key-file"; # TODO use agenix
nginx = { nginx = {
serverName = "wiki.mutualaid.work"; serverName = "wiki.sincerity.network";
listenAddresses = [ "0.0.0.0" ]; listenAddresses = [ "0.0.0.0" ];
forceSSL = true; forceSSL = true;
enableACME = true; enableACME = true;

2
nixos/configuration.nix
View file

@ -7,7 +7,7 @@
# Import your generated (nixos-generate-config) hardware configuration # Import your generated (nixos-generate-config) hardware configuration
./hardware-configuration.nix ./hardware-configuration.nix
./vault-warden.nix ./vault-warden.nix
# ./book-stack.nix ./book-stack.nix
# ./bonfire.nix # ./bonfire.nix
./mumble.nix ./mumble.nix
]; ];

8
secrets/bookstack-app-file-key.age Normal file
View file

@ -0,0 +1,8 @@
age-encryption.org/v1
-> ssh-ed25519 gm2l9w rbcxQCRvrPZ8fpkJVAYORMvcZDW3W+U4cTffMgF4Jkc
GGq3QOlsKaZbSjlosCb3hDix2/BI6bLyriBTqZbAv6Y
-> $d-FD:-grease E =s%
UyDWgsHQwFtEQj4m7lBaHq9EH9LmZI8Z9/T5QUn9acYX9V0
--- atlTfS4hkVQXzaWulmfSWdMuWgf4+ar7js2eFPz6V2g
Äìrs{J¢ €#Û»$Úú€Ò4n?aàtm
Þ“ x&8v<>•ƒÒËÖ1?¿gø¤Àü‘Ûç´&$1ËAÀ0Kƒƒ³o¬Mü­äj