feat: move secrets to noisebell repo and update
This commit is contained in:
parent
5204cc3af6
commit
50f85422e4
8 changed files with 198 additions and 40 deletions
|
|
@ -1,27 +1,27 @@
|
|||
{ config, ... }:
|
||||
{ config, inputs, ... }:
|
||||
|
||||
{
|
||||
users.groups.noisebell = {};
|
||||
users.users.noisebell-cache.extraGroups = [ "noisebell" ];
|
||||
users.users.noisebell-discord.extraGroups = [ "noisebell" ];
|
||||
|
||||
age.secrets.noisebell-pi-api-key = {
|
||||
file = ../secrets/noisebell-pi-api-key.age;
|
||||
age.secrets.noisebell-pi-to-cache-key = {
|
||||
file = "${inputs.noisebell}/secrets/pi-to-cache-key.age";
|
||||
group = "noisebell";
|
||||
mode = "0440";
|
||||
};
|
||||
age.secrets.noisebell-inbound-api-key = {
|
||||
file = ../secrets/noisebell-inbound-api-key.age;
|
||||
age.secrets.noisebell-cache-to-pi-key = {
|
||||
file = "${inputs.noisebell}/secrets/cache-to-pi-key.age";
|
||||
group = "noisebell";
|
||||
mode = "0440";
|
||||
};
|
||||
age.secrets.noisebell-discord-token = {
|
||||
file = ../secrets/noisebell-discord-token.age;
|
||||
file = "${inputs.noisebell}/secrets/discord-token.age";
|
||||
group = "noisebell";
|
||||
mode = "0440";
|
||||
};
|
||||
age.secrets.noisebell-discord-webhook-secret = {
|
||||
file = ../secrets/noisebell-discord-webhook-secret.age;
|
||||
file = "${inputs.noisebell}/secrets/discord-webhook-secret.age";
|
||||
group = "noisebell";
|
||||
mode = "0440";
|
||||
};
|
||||
|
|
@ -31,8 +31,8 @@
|
|||
port = 3003;
|
||||
domain = "noisebell.extremist.software";
|
||||
piAddress = "http://noisebell:80";
|
||||
piApiKeyFile = config.age.secrets.noisebell-pi-api-key.path;
|
||||
inboundApiKeyFile = config.age.secrets.noisebell-inbound-api-key.path;
|
||||
piApiKeyFile = config.age.secrets.noisebell-cache-to-pi-key.path;
|
||||
inboundApiKeyFile = config.age.secrets.noisebell-pi-to-cache-key.path;
|
||||
outboundWebhooks = [
|
||||
{ url = "https://discord.noisebell.extremist.software/webhook"; secretFile = config.age.secrets.noisebell-discord-webhook-secret.path; }
|
||||
];
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue