99 lines
2.0 KiB
Nix
99 lines
2.0 KiB
Nix
{
|
|
config,
|
|
lib,
|
|
pkgs,
|
|
inputs,
|
|
...
|
|
}:
|
|
{
|
|
imports = [
|
|
inputs.agenix.nixosModules.default
|
|
];
|
|
|
|
# Configure all agenix secrets
|
|
age.secrets = {
|
|
# ZFS encryption key
|
|
# path is set to /etc/zfs-key to match the ZFS dataset keylocation property
|
|
zfs-key = {
|
|
file = ../secrets/zfs-key.age;
|
|
mode = "0400";
|
|
owner = "root";
|
|
group = "root";
|
|
path = "/etc/zfs-key";
|
|
};
|
|
|
|
# Secureboot keys archive
|
|
secureboot-tar = {
|
|
file = ../secrets/secureboot.tar.age;
|
|
mode = "0400";
|
|
owner = "root";
|
|
group = "root";
|
|
};
|
|
|
|
# System passwords
|
|
hashedPass = {
|
|
file = ../secrets/hashedPass.age;
|
|
mode = "0400";
|
|
owner = "root";
|
|
group = "root";
|
|
};
|
|
|
|
# Service authentication
|
|
caddy_auth = {
|
|
file = ../secrets/caddy_auth.age;
|
|
mode = "0400";
|
|
owner = "caddy";
|
|
group = "caddy";
|
|
};
|
|
|
|
jellyfin-api-key = {
|
|
file = ../secrets/jellyfin-api-key.age;
|
|
mode = "0400";
|
|
owner = "root";
|
|
group = "root";
|
|
};
|
|
|
|
slskd_env = {
|
|
file = ../secrets/slskd_env.age;
|
|
mode = "0500";
|
|
owner = config.services.slskd.user;
|
|
group = config.services.slskd.group;
|
|
};
|
|
|
|
# Network configuration
|
|
wg0-conf = {
|
|
file = ../secrets/wg0.conf.age;
|
|
mode = "0400";
|
|
owner = "root";
|
|
group = "root";
|
|
};
|
|
|
|
# ntfy-alerts secrets
|
|
ntfy-alerts-topic = {
|
|
file = ../secrets/ntfy-alerts-topic.age;
|
|
mode = "0400";
|
|
owner = "root";
|
|
group = "root";
|
|
};
|
|
|
|
ntfy-alerts-token = {
|
|
file = ../secrets/ntfy-alerts-token.age;
|
|
mode = "0400";
|
|
owner = "root";
|
|
group = "root";
|
|
};
|
|
|
|
# Firefox Sync server secrets (SYNC_MASTER_SECRET)
|
|
firefox-syncserver-env = {
|
|
file = ../secrets/firefox-syncserver-env.age;
|
|
mode = "0400";
|
|
};
|
|
|
|
# MollySocket env (MOLLY_VAPID_PRIVKEY + MOLLY_ALLOWED_UUIDS)
|
|
mollysocket-env = {
|
|
file = ../secrets/mollysocket-env.age;
|
|
mode = "0400";
|
|
};
|
|
};
|
|
}
|