commit 43e554d9edf4a0f443f19caca7fd8fee02b7e017 · sapphic.moe/flake

+12

secrets/glance.age

···

       1
       1
       +
       -----BEGIN AGE ENCRYPTED FILE-----

     

       2
       2
       +
       YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IDFDVDk3dyBZV09o

     

       3
       3
       +
       RHlHTWszNElqclZFM3FDWnRaQVZKbWYvcm1rZUdyV01lbnNockZRCnVTODV2T0k4

     

       4
       4
       +
       ckEzMnN5UmpseVZLZ3F2dmVnQ1BsV0hOVlNDdXpyaytsaVkKLT4gc3NoLWVkMjU1

     

       5
       5
       +
       MTkgZVAzVHRRIDZWcnBVOVJ3ZFdZeFJMYUxLeXloKzFnMkV2dW9LR25oU1JMVGFL

     

       6
       6
       +
       bXczU0kKUmhmN2FQWkl0TEhrMzFiVnpDajB4bEZUU0pRaGpGcktaQ3RhMDlrM3ZM

     

       7
       7
       +
       dwotPiBiKT1xMVpALWdyZWFzZQpTeGpyd0docEh6UXJTUmhtCi0tLSBsek9TdjVH

     

       8
       8
       +
       OWZoaDJKT3pFZkxaZXJ3a09UenpmVDY1ekdOVldOVTJzOEM0CpmiXeScFuofCW5E

     

       9
       9
       +
       aS/Rsu090wT1g+yn5ytGnXkDWWXO4+K7BEMLCVFipm7vi3W9NyjOEF8rWfJC5W8F

     

       10
       10
       +
       0wwxzypjtrdQ2Bp0yHZf/RqcM5uWBfz9paGfu7edX7mUQfxf5lUJoK4qNkvqqKbS

     

       11
       11
       +
       hiieLa1w53kYi5XjinBiJeQLjInB9Lp+uDEzLi2xM5H9XJyVXTUq1rI=

     

       12
       12
       +
       -----END AGE ENCRYPTED FILE-----

+1

secrets/secrets.nix

···

       9
       9
        
       in

     

       10
       10
        
       {

     

       11
       11
        
         "caddy.age".publicKeys = keys;

     

       12
       12
       +
         "glance.age".publicKeys = keys;

     

       12
       13
        
       }

+8

services/glance/default.nix

···

       1
       1
       +
       { config, ... }:

     

       2
       2
       +
       

     

       1
       3
        
       {

     

       4
       4
       +
         age.secrets.glance = {

     

       5
       5
       +
           file = ../../secrets/glance.age;

     

       6
       6
       +
           mode = "600";

     

       7
       7
       +
         };

     

       8
       8
       +
       

     

       2
       9
        
         services.glance = {

     

       3
       10
        
           enable = true;

     

       4
       11
        
           openFirewall = true;

     

       12
       12
       +
           environmentFile = config.age.secrets.glance.path;

     

       5
       13
        
           settings = import ./settings.nix;

     

       6
       14
        
         };

     

       7
       15

+9

services/glance/settings.nix

···

       165
       165
        
                       "UCHC4G4X-OR5WkY-IquRGa3Q"

     

       166
       166
        
                     ];

     

       167
       167
        
                   }

     

       168
       168
       +
                   {

     

       169
       169
       +
                     type = "reddit";

     

       170
       170
       +
                     subreddit = "selfhosted";

     

       171
       171
       +
                     "app-auth" = {

     

       172
       172
       +
                       name = "\${REDDIT_APP_NAME}";

     

       173
       173
       +
                       id = "\${REDDIT_APP_CLIENT_ID}";

     

       174
       174
       +
                       secret = "\${REDDIT_APP_SECRET}";

     

       175
       175
       +
                     };

     

       176
       176
       +
                   }

     

       168
       177
        
                 ];

     

       169
       178
        
               }

     

       170
       179
        
               {