forked from wurzel/fruitbasket
configured sops
This commit is contained in:
parent
6525c45ca2
commit
806a5078ca
3 changed files with 13 additions and 3 deletions
|
@ -1,4 +1,4 @@
|
|||
{pkgs, conifg, lib}: {
|
||||
{pkgs, config, lib, ...}: {
|
||||
|
||||
sops.secrets.postgres_keycloak.owner = config.systemd.services.keycloak.serviceConfig.User;
|
||||
|
||||
|
@ -13,7 +13,7 @@
|
|||
database = {
|
||||
username = "keycloak";
|
||||
type = "postgresql";
|
||||
passwordFile = ;
|
||||
passwordFile = config.sops.secrets.postgres_keycloak.path;
|
||||
name = "keycloak";
|
||||
host = "localhost";
|
||||
};
|
||||
|
|
5
modules/sops.nix
Normal file
5
modules/sops.nix
Normal file
|
@ -0,0 +1,5 @@
|
|||
{ config, lib, pkgs, ... }:
|
||||
{
|
||||
sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
|
||||
sops.age.generateKey = false;
|
||||
}
|
Loading…
Add table
Add a link
Reference in a new issue