refactor(teslamate.nix): update secrets file path and add age secret configuration

This commit is contained in:
Giulio De Pasquale 2024-12-06 20:55:44 +00:00
parent 847677fc2f
commit 3f3b3d0604
3 changed files with 8 additions and 2 deletions

View File

@ -8,6 +8,11 @@ let
allowWAN = false; allowWAN = false;
in in
{ {
age.secrets.teslamate = {
file = ../../secrets/teslamate.age;
owner = "teslamate";
};
architect.vhost.${domain} = with config.architect.networks; { architect.vhost.${domain} = with config.architect.networks; {
dnsInterfaces = [ "lan" "tailscale" ]; dnsInterfaces = [ "lan" "tailscale" ];
locations = { locations = {
@ -43,7 +48,7 @@ in
port = teslamatePort; port = teslamatePort;
listenAddress = "127.0.0.1"; listenAddress = "127.0.0.1";
secretsFile = "/secrets/teslamate/teslamate.env"; secretsFile = config.age.secrets.teslamate.path;
virtualHost = domain; virtualHost = domain;
postgres.enable_server = true; postgres.enable_server = true;
grafana = { enable = true; port = grafanaPort; listenAddress = "127.0.0.1"; urlPath = "/grafana"; }; grafana = { enable = true; port = grafanaPort; listenAddress = "127.0.0.1"; urlPath = "/grafana"; };

View File

@ -4,5 +4,6 @@ let
]; ];
in in
{ {
"secrets/matrix-synapse.age".publicKeys = pubkeys; "matrix-synapse.age".publicKeys = pubkeys;
"teslamate.age".publicKeys = pubkeys;
} }

BIN
secrets/teslamate.age Normal file

Binary file not shown.