commit b7565d79372d5ba9fb981dd19496b5fe82b6ff1c · soopy.moe/gensokyo

+11 -4

systems/koumakan/services/databases/wastebin.nix

···

       1
       1
       -
       {_utils, config, ...}: let

     

       1
       1
       +
       {

     

       2
       2
       +
         _utils,

     

       3
       3
       +
         config,

     

       4
       4
       +
         ...

     

       5
       5
       +
       }: let

     

       2
       6
        
         secrets = _utils.setupSecrets config {

     

       3
       7
        
           namespace = "wastebasket";

     

       4
       8
        
           secrets = ["key"];

     

       5
       9
        
         };

     

       6
       10
        
       in {

     

       7
       11
        
         # figure out a way to disable encryption, i don't trust the impl.

     

       8
       8
       -
         imports = [secrets.generate (secrets.mkTemplate "wastebin.env" ''

     

       9
       9
       -
           WASTEBIN_SIGNING_KEY=${secrets.placeholder "key"}

     

       10
       10
       -
         '')];

     

       12
       12
       +
         imports = [

     

       13
       13
       +
           secrets.generate

     

       14
       14
       +
           (secrets.mkTemplate "wastebin.env" ''

     

       15
       15
       +
             WASTEBIN_SIGNING_KEY=${secrets.placeholder "key"}

     

       16
       16
       +
           '')

     

       17
       17
       +
         ];

     

       11
       18
        
         services.wastebin = {

     

       12
       19
        
           enable = true;

     

       13
       20
        
           settings = {

+1

systems/koumakan/services/scm/forgejo.nix

···

       242
       242
        
         # }}}

     

       243
       243
        
       }

     

       244
       244
        
       # vim:foldmethod=marker

     

       245
       245
       +

+10 -5

systems/koumakan/services/scm/tangled-knot.nix

···

       1
       1
       -
       {_utils, config, ...}: let

     

       1
       1
       +
       {

     

       2
       2
       +
         _utils,

     

       3
       3
       +
         config,

     

       4
       4
       +
         ...

     

       5
       5
       +
       }: let

     

       2
       6
        
         secrets = _utils.setupSecrets config {

     

       3
       7
        
           namespace = "tangled";

     

       4
       8
        
           secrets = ["knot/key"];

     

       5
       9
        
         };

     

       6
       10
        
       in {

     

       7
       7
       -
         imports = [secrets.generate

     

       11
       11
       +
         imports = [

     

       12
       12
       +
           secrets.generate

     

       8
       13
        
       

     

       9
       9
       -
         (secrets.mkTemplate "knotserver.env" ''

     

       10
       10
       -
           KNOT_SERVER_SECRET=${secrets.placeholder "knot/key"}

     

       11
       11
       -
         '')

     

       14
       14
       +
           (secrets.mkTemplate "knotserver.env" ''

     

       15
       15
       +
             KNOT_SERVER_SECRET=${secrets.placeholder "knot/key"}

     

       16
       16
       +
           '')

     

       12
       17
        
         ];

     

       13
       18
        
       

     

       14
       19
        
         services.tangled-knotserver = {

+1 -2

users/_tester.nix

···

       1
       1
       -
       {...}:

     

       2
       2
       -
       {

     

       1
       1
       +
       {...}: {

     

       3
       2
        
         virtualisation.vmVariant.users._tester = builtins.warn "[vm] building tester user..." {

     

       4
       3
        
           password = "explode";

     

       5
       4
        
           isNormalUser = true;