refactor(teslamate.nix): update secrets file path and add age secret configuration
This commit is contained in:
parent
847677fc2f
commit
3f3b3d0604
@ -8,6 +8,11 @@ let
|
|||||||
allowWAN = false;
|
allowWAN = false;
|
||||||
in
|
in
|
||||||
{
|
{
|
||||||
|
age.secrets.teslamate = {
|
||||||
|
file = ../../secrets/teslamate.age;
|
||||||
|
owner = "teslamate";
|
||||||
|
};
|
||||||
|
|
||||||
architect.vhost.${domain} = with config.architect.networks; {
|
architect.vhost.${domain} = with config.architect.networks; {
|
||||||
dnsInterfaces = [ "lan" "tailscale" ];
|
dnsInterfaces = [ "lan" "tailscale" ];
|
||||||
locations = {
|
locations = {
|
||||||
@ -43,7 +48,7 @@ in
|
|||||||
port = teslamatePort;
|
port = teslamatePort;
|
||||||
|
|
||||||
listenAddress = "127.0.0.1";
|
listenAddress = "127.0.0.1";
|
||||||
secretsFile = "/secrets/teslamate/teslamate.env";
|
secretsFile = config.age.secrets.teslamate.path;
|
||||||
virtualHost = domain;
|
virtualHost = domain;
|
||||||
postgres.enable_server = true;
|
postgres.enable_server = true;
|
||||||
grafana = { enable = true; port = grafanaPort; listenAddress = "127.0.0.1"; urlPath = "/grafana"; };
|
grafana = { enable = true; port = grafanaPort; listenAddress = "127.0.0.1"; urlPath = "/grafana"; };
|
||||||
|
@ -4,5 +4,6 @@ let
|
|||||||
];
|
];
|
||||||
in
|
in
|
||||||
{
|
{
|
||||||
"secrets/matrix-synapse.age".publicKeys = pubkeys;
|
"matrix-synapse.age".publicKeys = pubkeys;
|
||||||
|
"teslamate.age".publicKeys = pubkeys;
|
||||||
}
|
}
|
||||||
|
BIN
secrets/teslamate.age
Normal file
BIN
secrets/teslamate.age
Normal file
Binary file not shown.
Loading…
Reference in New Issue
Block a user