rouven.seifert/nixos-config
1
1
Fork 0
mirror of https://git.sr.ht/~rouven/nixos-config synced 2025-04-25 16:08:30 +02:00
Code Issues Projects Releases Packages Wiki Activity

agenix: migrate nuc

Browse source
This commit is contained in:
Rouven Seifert 2023-11-16 14:40:40 +01:00
parent 517f03c86e
commit 3c5095f144
Signed by: rouven.seifert
GPG key ID: B95E8FE6B11C4D09
17 changed files with 60 additions and 144 deletions
Download patch file Download diff file Expand all files Collapse all files

6
hosts/nuc/modules/backup/default.nix
View file

@ -1,6 +1,8 @@
{ config, pkgs, ... }:
{
sops.secrets."borg/passphrase" = { };
age.secrets."borg/passphrase" = {
file = ../../../../secrets/nuc/borg/passphrase.age;
};
environment.systemPackages = [ pkgs.borgbackup ];
fileSystems."/mnt/backup" =
{
@ -23,7 +25,7 @@
path = "/mnt/backup/nuc";
}
];
encryption_passcommand = "${pkgs.coreutils}/bin/cat ${config.sops.secrets."borg/passphrase".path}";
encryption_passcommand = "${pkgs.coreutils}/bin/cat ${config.age.secrets."borg/passphrase".path}";
compression = "lz4";
keep_daily = 7;
keep_weekly = 4;

13
hosts/nuc/modules/matrix/default.nix
View file

@ -4,12 +4,13 @@ let
in
{
sops.secrets = {
"matrix/shared_secret" = {
age.secrets = {
"matrix/shared" = {
file = ../../../../secrets/nuc/matrix/shared.age;
owner = config.systemd.services.matrix-synapse.serviceConfig.User;
};
"matrix/sync/environment" = {
# owner = "matrix-sliding-sync";
"matrix/sync" = {
file = ../../../../secrets/nuc/matrix/sync.age;
};
};
@ -25,7 +26,7 @@ in
matrix-synapse = {
enable = true;
configureRedisLocally = true;
extraConfigFiles = [ config.sops.secrets."matrix/shared_secret".path ];
extraConfigFiles = [ config.age.secrets."matrix/shared".path ];
settings = {
server_name = config.networking.domain;
@ -47,7 +48,7 @@ in
settings = {
SYNCV3_SERVER = "https://${domain}";
};
environmentFile = config.sops.secrets."matrix/sync/environment".path;
environmentFile = config.age.secrets."matrix/sync".path;
};
};

5
hosts/nuc/modules/nextcloud/default.nix
View file

@ -3,8 +3,9 @@ let
domain = "nextcloud.${config.networking.domain}";
in
{
sops.secrets = {
age.secrets = {
"nextcloud/adminpass" = {
file = ../../../../secrets/nuc/nextcloud/adminpass.age;
owner = "nextcloud";
group = "nextcloud";
};
@ -21,7 +22,7 @@ in
dbuser = "nextcloud";
dbhost = "/run/postgresql";
dbname = "nextcloud";
adminpassFile = config.sops.secrets."nextcloud/adminpass".path;
adminpassFile = config.age.secrets."nextcloud/adminpass".path;
adminuser = "rouven";
};
};

7
hosts/nuc/modules/vaultwarden/default.nix
View file

@ -3,11 +3,14 @@ let
domain = "vault.${config.networking.domain}";
in
{
sops.secrets."vaultwarden/env".owner = "vaultwarden";
age.secrets.vaultwarden = {
file = ../../../../secrets/nuc/vaultwarden.age;
owner = "vaultwarden";
};
services.vaultwarden = {
enable = true;
dbBackend = "postgresql";
environmentFile = config.sops.secrets."vaultwarden/env".path;
environmentFile = config.age.secrets.vaultwarden.path;
config = {
domain = "https://${domain}";
signupsAllowed = false;