feat: move secrets to noisebell repo and update

This commit is contained in:
Jet 2026-03-17 03:50:26 -07:00
parent 5204cc3af6
commit 50f85422e4
No known key found for this signature in database
8 changed files with 198 additions and 40 deletions

View file

@ -1,27 +1,27 @@
{ config, ... }:
{ config, inputs, ... }:
{
users.groups.noisebell = {};
users.users.noisebell-cache.extraGroups = [ "noisebell" ];
users.users.noisebell-discord.extraGroups = [ "noisebell" ];
age.secrets.noisebell-pi-api-key = {
file = ../secrets/noisebell-pi-api-key.age;
age.secrets.noisebell-pi-to-cache-key = {
file = "${inputs.noisebell}/secrets/pi-to-cache-key.age";
group = "noisebell";
mode = "0440";
};
age.secrets.noisebell-inbound-api-key = {
file = ../secrets/noisebell-inbound-api-key.age;
age.secrets.noisebell-cache-to-pi-key = {
file = "${inputs.noisebell}/secrets/cache-to-pi-key.age";
group = "noisebell";
mode = "0440";
};
age.secrets.noisebell-discord-token = {
file = ../secrets/noisebell-discord-token.age;
file = "${inputs.noisebell}/secrets/discord-token.age";
group = "noisebell";
mode = "0440";
};
age.secrets.noisebell-discord-webhook-secret = {
file = ../secrets/noisebell-discord-webhook-secret.age;
file = "${inputs.noisebell}/secrets/discord-webhook-secret.age";
group = "noisebell";
mode = "0440";
};
@ -31,8 +31,8 @@
port = 3003;
domain = "noisebell.extremist.software";
piAddress = "http://noisebell:80";
piApiKeyFile = config.age.secrets.noisebell-pi-api-key.path;
inboundApiKeyFile = config.age.secrets.noisebell-inbound-api-key.path;
piApiKeyFile = config.age.secrets.noisebell-cache-to-pi-key.path;
inboundApiKeyFile = config.age.secrets.noisebell-pi-to-cache-key.path;
outboundWebhooks = [
{ url = "https://discord.noisebell.extremist.software/webhook"; secretFile = config.age.secrets.noisebell-discord-webhook-secret.path; }
];