nixos-config/services/etebase.nix
Felix Schröter 0dee8b4fa7
fix(secrets): fix permissions
Also moves key references into respective configs where they are used.
2022-05-06 03:44:47 +02:00

26 lines
686 B
Nix

{ config, pkgs, ... }:
let etebaseHost = "etebase.felschr.com";
in {
age.secrets.etebase-server = {
file = ../secrets/etebase-server.age;
owner = config.services.etebase-server.user;
group = config.services.etebase-server.user;
};
services.etebase-server.enable = true;
services.etebase-server.openFirewall = true;
services.etebase-server.settings = {
global = { secret_file = config.age.secrets.etebase-server.path; };
allowed_hosts = { allowed_host1 = etebaseHost; };
};
services.nginx = {
virtualHosts."${etebaseHost}" = {
enableACME = true;
forceSSL = true;
locations."/".proxyPass = "http://localhost:8001";
};
};
}