update secrets

This commit is contained in:
TheWanderingCrow 2025-03-31 18:44:40 -04:00
parent 9ea4f81015
commit 8fd37ac332
5 changed files with 40 additions and 15 deletions

View file

@ -10,5 +10,6 @@
./frigate.nix
./trilium.nix
./grocy.nix
./gitlab.nix
];
}

View file

@ -0,0 +1,31 @@
{
config,
lib,
...
}:
lib.mkIf config.user.overseer.enable {
sops = {
secrets = {
"gitlab/db_password" = {};
"gitlab/secrets/db" = {};
"gitlab/secrets/jws" = {};
"gitlab/secrets/otp" = {};
"gitlab/secrets/secret" = {};
};
};
services.gitlab = {
enable = true;
host = "git.wanderingcrow.net";
https = true;
databaseCreateLocally = true;
databasePasswordFile = config.sops.secrets."gitlab/db_password";
initialRootPasswordFile = config.sops.secrets."gitlab/initial_root";
secrets = {
secretFile = config.sops.secrets."gitlab/secrets/secret";
otpFile = config.sops.secrets."gitlab/secrets/otp";
jwsFile = config.sops.secrets."gitlab/secrets/jws";
dbFile = config.sops.secrets."gitlab/secrets/db";
};
};
}

View file

@ -104,14 +104,6 @@ lib.mkIf config.user.overseer.enable {
}
];
}
{
Bookstack = [
{
icon = "bookstack.svg";
href = "https://bookstack.wanderingcrow.net";
}
];
}
];
}
{

View file

@ -22,6 +22,7 @@ lib.mkIf config.user.overseer.enable {
useACMEHost = "notes.wanderingcrow.net";
locations."/" = {
proxyPass = "http://127.0.0.1:8090";
proxyWebsockets = true;
};
};
};