feat: set up agenix secrets management
This commit is contained in:
parent
cc6226d335
commit
5f329f550e
32 changed files with 279 additions and 44 deletions
|
@ -25,7 +25,7 @@ in {
|
|||
];
|
||||
extraOptions = [
|
||||
# TODO systemd doesn't substitute variables because it doesn't run in a shell
|
||||
# "-e OTR_PASS=\"$(cat /etc/nixos/secrets/mqtt/owntracks-plain)\""
|
||||
# "-e OTR_PASS=\"$(cat ${config.age.secrets.mqtt-owntracks-plain.path})\""
|
||||
"--network=host"
|
||||
];
|
||||
};
|
||||
|
@ -49,7 +49,7 @@ in {
|
|||
enableACME = true;
|
||||
forceSSL = true;
|
||||
locations."/".proxyPass = "http://localhost:8085";
|
||||
basicAuthFile = "/etc/nixos/secrets/owntracks/htpasswd";
|
||||
basicAuthFile = config.age.secrets.owntracks-htpasswd.path;
|
||||
};
|
||||
};
|
||||
};
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue