63 lines
2.5 KiB
Nix
63 lines
2.5 KiB
Nix
{
|
|
config, ...
|
|
}:
|
|
{
|
|
sops.defaultSopsFile = ../../secrets/secrets.yaml;
|
|
sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
|
|
|
|
sops.secrets."jallen-nas/admin_password" = {};
|
|
sops.secrets."jallen-nas/admin_password".neededForUsers = true;
|
|
|
|
sops.secrets."wifi" = {};
|
|
|
|
sops.secrets."jallen-nas/collabora" = {
|
|
restartUnits = [ "podman-collabora.service" ];
|
|
};
|
|
|
|
sops.secrets."jallen-nas/mariadb/db_pass" = {
|
|
restartUnits = [ "podman-mariadb.service" ];
|
|
};
|
|
sops.secrets."jallen-nas/mariadb/root_pass" = {
|
|
restartUnits = [ "podman-mariadb.service" ];
|
|
};
|
|
|
|
sops.secrets."jallen-nas/nextcloud/dbpassword" = {
|
|
restartUnits = [ "container@nextcloud.service" ];
|
|
};
|
|
sops.secrets."jallen-nas/nextcloud/adminpassword" = {
|
|
restartUnits = [ "container@nextcloud.service" ];
|
|
};
|
|
sops.secrets."jallen-nas/nextcloud/smtppassword" = {
|
|
restartUnits = [ "container@nextcloud.service" ];
|
|
};
|
|
|
|
sops.templates."nextcloud-smtp".content = ''
|
|
"${config.sops.placeholder."jallen-nas/nextcloud/smtppassword"}"
|
|
'';
|
|
|
|
# Permission modes are in octal representation (same as chmod),
|
|
# the digits represent: user|group|others
|
|
# 7 - full (rwx)
|
|
# 6 - read and write (rw-)
|
|
# 5 - read and execute (r-x)
|
|
# 4 - read only (r--)
|
|
# 3 - write and execute (-wx)
|
|
# 2 - write only (-w-)
|
|
# 1 - execute only (--x)
|
|
# 0 - none (---)
|
|
sops.secrets."jallen-nas/nextcloud/dbpassword".mode = "0777";
|
|
# Either a user id or group name representation of the secret owner
|
|
# It is recommended to get the user name from `config.users.users.<?name>.name` to avoid misconfiguration
|
|
# sops.secrets."jallen-nas/nextcloud/dbpassword".owner = config.users.users.nix-apps.name;
|
|
# # Either the group id or group name representation of the secret group
|
|
# # It is recommended to get the group name from `config.users.users.<?name>.group` to avoid misconfiguration
|
|
# sops.secrets."jallen-nas/nextcloud/dbpassword".group = config.users.users.jallen-nas.group;
|
|
|
|
sops.secrets."jallen-nas/nextcloud/adminpassword".mode = "0777";
|
|
# sops.secrets."jallen-nas/nextcloud/adminpassword".owner = config.users.users.nix-apps.name;
|
|
# sops.secrets."jallen-nas/nextcloud/adminpassword".group = config.users.users.jallen-nas.group;
|
|
|
|
sops.secrets."jallen-nas/nextcloud/smtppassword".mode = "0777";
|
|
# sops.secrets."jallen-nas/nextcloud/smtppassword".owner = config.users.users.nix-apps.name;
|
|
# sops.secrets."jallen-nas/nextcloud/smtppassword".group = config.users.users.jallen-nas.group;
|
|
} |