mirror of
https://github.com/kmein/niveum
synced 2026-03-21 12:21:08 +01:00
chore: get secrets via input, mock for CI
this fixes CI, yay!
This commit is contained in:
@@ -2,6 +2,7 @@
|
||||
config,
|
||||
pkgs,
|
||||
lib,
|
||||
inputs,
|
||||
...
|
||||
}: let
|
||||
firewall = (import ../../lib).firewall lib;
|
||||
@@ -102,14 +103,14 @@ in {
|
||||
|
||||
age.secrets = {
|
||||
ympd-basicAuth = {
|
||||
file = ../../secrets/zaatar-ympd-basicAuth.age;
|
||||
file = inputs.secrets + "/zaatar-ympd-basicAuth.age";
|
||||
owner = "nginx";
|
||||
group = "nginx";
|
||||
mode = "400";
|
||||
};
|
||||
syncthing-cert.file = ../../secrets/zaatar-syncthing-cert.age;
|
||||
syncthing-key.file = ../../secrets/zaatar-syncthing-key.age;
|
||||
di-fm-key.file = ../../secrets/di-fm-key.age;
|
||||
syncthing-cert.file = inputs.secrets + "/zaatar-syncthing-cert.age";
|
||||
syncthing-key.file = inputs.secrets + "/zaatar-syncthing-key.age";
|
||||
di-fm-key.file = inputs.secrets + "/di-fm-key.age";
|
||||
};
|
||||
|
||||
services.nginx = {
|
||||
|
||||
Reference in New Issue
Block a user