alarsyo/nixos-config
alarsyo/nixos-config
1
1
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

secrets: move transmission secret to agenix

Browse source
This commit is contained in:
Antoine Martin 2022-03-11 18:14:50 +01:00
parent 540968627c
commit 165b30ef9c
8 changed files with 18 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

3
services/matrix.nix
View file

@ -14,6 +14,7 @@ let
mkEnableOption
mkIf
mkOption
optionals
;
cfg = config.my.services.matrix;
@ -46,7 +47,7 @@ in {
services.matrix-synapse = {
enable = true;
extraConfigFiles = lib.optionals (cfg.secretConfigFile != null) [
extraConfigFiles = optionals (cfg.secretConfigFile != null) [
cfg.secretConfigFile
];

15
services/transmission.nix
View file

@ -4,6 +4,7 @@ let
mkEnableOption
mkIf
mkOption
optionalAttrs
;
cfg = config.my.services.transmission;
@ -27,10 +28,11 @@ in
description = "Name of the transmission RPC user";
};
password = mkOption {
type = types.str;
example = "password";
description = "Password of the transmission RPC user";
secretConfigFile = mkOption {
type = types.nullOr types.path;
default = null;
example = "/var/run/secrets/transmission-secrets";
description = "Path to secrets file to append to configuration";
};
};
@ -50,7 +52,6 @@ in
rpc-authentication-required = true;
rpc-username = cfg.username;
rpc-password = cfg.password;
rpc-whitelist-enabled = true;
rpc-whitelist = "127.0.0.1";
@ -58,7 +59,9 @@ in
# automatically allow transmission.settings.peer-port
openFirewall = true;
};
} // (optionalAttrs (cfg.secretConfigFile != null) {
credentialsFile = cfg.secretConfigFile;
});
services.nginx.virtualHosts."${webuiDomain}" = {
forceSSL = true;