lorenzo/servers
1
0
Fork 0
Code Pull requests Packages Activity

Nixfmt Tree

Browse source
This commit is contained in:
Lorenzo Good 2026-02-24 00:00:35 -08:00
parent d6bcf1a468
commit f173b9d236
Signed by: lorenzo
GPG key ID: 7FCD64BD81180ED0
23 changed files with 381 additions and 224 deletions
Download patch file Download diff file Expand all files Collapse all files

59
machines/lebesgue/config/secrets.nix
View file

@ -1,31 +1,40 @@
{...}: {
{ ... }:
{
sops = {
defaultSopsFile = ../secrets/main.yaml;
secrets = let
autheliaSecret = {
owner = "authelia-main";
sopsFile = ../secrets/authelia/secrets.yaml;
secrets =
let
autheliaSecret = {
owner = "authelia-main";
sopsFile = ../secrets/authelia/secrets.yaml;
};
in
{
admin-password.neededForUsers = true;
tskey = { };
vaultwarden-env = { };
restic-env = {
owner = "restic";
};
restic-password = {
owner = "restic";
};
restic-repository = {
owner = "restic";
};
lldap-admin-password.owner = "lldap";
authelia-jwtsecret = autheliaSecret;
authelia-oidc-privkey = autheliaSecret;
authelia-oidc-hmac = autheliaSecret;
authelia-session-secret = autheliaSecret;
authelia-storage-encryption = autheliaSecret;
authelia-lldap-password = autheliaSecret;
};
in {
admin-password.neededForUsers = true;
tskey = {};
vaultwarden-env = {};
restic-env = {owner = "restic";};
restic-password = {owner = "restic";};
restic-repository = {owner = "restic";};
lldap-admin-password.owner = "lldap";
authelia-jwtsecret = autheliaSecret;
authelia-oidc-privkey = autheliaSecret;
authelia-oidc-hmac = autheliaSecret;
authelia-session-secret = autheliaSecret;
authelia-storage-encryption = autheliaSecret;
authelia-lldap-password = autheliaSecret;
};
};
}