mjallen/nix-config
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

nebula

Browse Source
This commit is contained in:
mjallen18
2026-02-13 13:14:35 -06:00
parent 869a320ede
commit 6ebc1bb103
6 changed files with 293 additions and 175 deletions
Download Patch File Download Diff File Expand all files Collapse all files

45
modules/nixos/services/nebula-lighthouse/sops.nix Normal file
View File

@@ -0,0 +1,45 @@
{
config,
lib,
namespace,
...
}:
with lib;
let
cfg = config.${namespace}.services.nebula-lighthouse;
in
{
config = mkIf cfg.enable {
sops = {
secrets = {
"pi4/nebula/ca-cert" = {
sopsFile = (lib.snowfall.fs.get-file "secrets/nas-secrets.yaml");
owner = "nebula-nas-nebula";
group = "nebula-nas-nebula";
restartUnits = [ "nebula@nas-nebula.service" ];
};
"pi4/nebula/ca-key" = {
sopsFile = (lib.snowfall.fs.get-file "secrets/nas-secrets.yaml");
owner = "nebula-nas-nebula";
group = "nebula-nas-nebula";
restartUnits = [ "nebula@nas-nebula.service" ];
};
"pi4/nebula/lighthouse-cert" = {
sopsFile = (lib.snowfall.fs.get-file "secrets/nas-secrets.yaml");
owner = "nebula-nas-nebula";
group = "nebula-nas-nebula";
restartUnits = [ "nebula@nas-nebula.service" ];
};
"pi4/nebula/lighthouse-key" = {
sopsFile = (lib.snowfall.fs.get-file "secrets/nas-secrets.yaml");
owner = "nebula-nas-nebula";
group = "nebula-nas-nebula";
restartUnits = [ "nebula@nas-nebula.service" ];
};
};
};
};
}