mirror of
https://github.com/TheWanderingCrow/CrOS.git
synced 2026-01-29 09:34:17 -05:00
update secrets
This commit is contained in:
parent
9ea4f81015
commit
8fd37ac332
5 changed files with 40 additions and 15 deletions
|
|
@ -10,5 +10,6 @@
|
|||
./frigate.nix
|
||||
./trilium.nix
|
||||
./grocy.nix
|
||||
./gitlab.nix
|
||||
];
|
||||
}
|
||||
|
|
|
|||
31
modules/users/overseer/services/gitlab.nix
Normal file
31
modules/users/overseer/services/gitlab.nix
Normal file
|
|
@ -0,0 +1,31 @@
|
|||
{
|
||||
config,
|
||||
lib,
|
||||
...
|
||||
}:
|
||||
lib.mkIf config.user.overseer.enable {
|
||||
sops = {
|
||||
secrets = {
|
||||
"gitlab/db_password" = {};
|
||||
"gitlab/secrets/db" = {};
|
||||
"gitlab/secrets/jws" = {};
|
||||
"gitlab/secrets/otp" = {};
|
||||
"gitlab/secrets/secret" = {};
|
||||
};
|
||||
};
|
||||
|
||||
services.gitlab = {
|
||||
enable = true;
|
||||
host = "git.wanderingcrow.net";
|
||||
https = true;
|
||||
databaseCreateLocally = true;
|
||||
databasePasswordFile = config.sops.secrets."gitlab/db_password";
|
||||
initialRootPasswordFile = config.sops.secrets."gitlab/initial_root";
|
||||
secrets = {
|
||||
secretFile = config.sops.secrets."gitlab/secrets/secret";
|
||||
otpFile = config.sops.secrets."gitlab/secrets/otp";
|
||||
jwsFile = config.sops.secrets."gitlab/secrets/jws";
|
||||
dbFile = config.sops.secrets."gitlab/secrets/db";
|
||||
};
|
||||
};
|
||||
}
|
||||
|
|
@ -104,14 +104,6 @@ lib.mkIf config.user.overseer.enable {
|
|||
}
|
||||
];
|
||||
}
|
||||
{
|
||||
Bookstack = [
|
||||
{
|
||||
icon = "bookstack.svg";
|
||||
href = "https://bookstack.wanderingcrow.net";
|
||||
}
|
||||
];
|
||||
}
|
||||
];
|
||||
}
|
||||
{
|
||||
|
|
|
|||
|
|
@ -22,6 +22,7 @@ lib.mkIf config.user.overseer.enable {
|
|||
useACMEHost = "notes.wanderingcrow.net";
|
||||
locations."/" = {
|
||||
proxyPass = "http://127.0.0.1:8090";
|
||||
proxyWebsockets = true;
|
||||
};
|
||||
};
|
||||
};
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue