alarsyo/nixos-config
alarsyo/nixos-config
1
1
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

poseidon: move paperless to hades

Browse source
This commit is contained in:
Antoine Martin 2022-11-05 16:15:33 +01:00
parent da0cefc923
commit caf5102535
8 changed files with 22 additions and 25 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
hosts/hades/default.nix
View file

@ -87,6 +87,13 @@ in {
adminpassFile = config.age.secrets."nextcloud/admin-pass".path; adminpassFile = config.age.secrets."nextcloud/admin-pass".path;
}; };
paperless = {
enable = true;
port = 8085;
passwordFile = config.age.secrets."paperless/admin-password".path;
secretKeyFile = config.age.secrets."paperless/secret-key".path;
};
photoprism = { photoprism = {
enable = true; enable = true;
port = 8084; port = 8084;

3
hosts/hades/secrets.nix
View file

@ -25,6 +25,9 @@
owner = "nextcloud"; owner = "nextcloud";
}; };
"paperless/admin-password" = {};
"paperless/secret-key" = {};
"restic-backup/hades-credentials" = {}; "restic-backup/hades-credentials" = {};
"restic-backup/hades-password" = {}; "restic-backup/hades-password" = {};

7
hosts/poseidon/default.nix
View file

@ -81,13 +81,6 @@ in {
port = 8083; port = 8083;
}; };
paperless = {
enable = true;
port = 8085;
passwordFile = config.age.secrets."paperless/admin-password".path;
secretKeyFile = config.age.secrets."paperless/secret-key".path;
};
tailscale = { tailscale = {
enable = true; enable = true;
exitNode = true; exitNode = true;

3
hosts/poseidon/secrets.nix
View file

@ -17,9 +17,6 @@
"lohr/shared-secret" = {}; "lohr/shared-secret" = {};
"paperless/admin-password" = {};
"paperless/secret-key" = {};
"restic-backup/poseidon-credentials" = {}; "restic-backup/poseidon-credentials" = {};
"restic-backup/poseidon-password" = {}; "restic-backup/poseidon-password" = {};

BIN
modules/secrets/paperless/admin-password.age
View file

Binary file not shown.

19
modules/secrets/paperless/secret-key.age
View file

@ -1,12 +1,9 @@
age-encryption.org/v1 age-encryption.org/v1
-> ssh-ed25519 k2gHjw hTWIhs//PCC1vsJrn+UL42FtqRzIKAzfQaVF8gU9iAo -> ssh-ed25519 k2gHjw CoGvifgWo1JvHjx3PKJa3jR3lKrvgvKnTTui1w6UR0I
B+BnsXp6J/NLViCMTd6vqj+JbTkkahjqabVvPIU5q9g gcadr6WbTzyrPD3h3oDifFj/pMZKIzUfDXL6e6610Is
-> ssh-ed25519 z6Eu8Q YMS3Ht3/97IcTJ31XsmnHhKIo41ewzuGAbnhWJA/qWg -> ssh-ed25519 pX8y2g MBFa4xDU6CaH6amzlGTmFXIcAXLq2xykRd0WkeUEkQo
8oiUduRgbcjz3EaP0VEUewVirgdoc7XVogscdceE4Ew 91jV5LUuhvOVKSg2cz3TMKI2SaZvCTzXL/xyUWbYJAg
-> --grease zku kAX26^8 N0 -> lkH}'\W;-grease nZ K\MP7 HUsh
Z/CvenJrdHzvk/YZq06fR25xnn2plwbUW3WX86yWv1e7IBYSqnKm9snd5VRRK/R3 vWwsKxuBXKwpTBkYERd7kPo
1EWv55qpuPBr --- xohFX48WGxRFVYQzdbSl7l2Go90FSUPH5ml6OalKJwQ
--- BRKnk4UzqUkM4po7qwV3omMv2KSEl5RzujwUSIQgQOg ÍsüČůÁňĆ€ă·ŐťˇźhÝÝő¦!č,(ŇQlÁök¶ţV×ä¬ŰóË~éýÔÍU !ÂűB0 ~ĂĎA!2Ůnp€`˛‹’ŐÍěL&Ż±ł{†}„3%{’[)<18>t…®/nĘjb^{Ť<>1Gű[G0ß ż×‘ň m›o<E280BA>ź<EFBFBD>« Č:naź¨Q®Ą\âćômfGľ;ů(Sţ¶źÉÎĺ
·"B§Ïe ñœ´|!»ÛƒÊ¤WH†5wL(v]A±,l¡Nû1·ó©·®Ì<06>ýœ4ŠkþÄY1âã» ³› ÞHáZ¥›P:n›+pýŠ)šYçq/]i5'ÔÝÖç=؆O¯ç˜FÎÜàÙø »
ÞE
¹ÃâΞ8Ýçõ<C3A7>ï"<22>çÅ=“¡³ÎoƒÌ†»s(¿ï›éX™ørÐ Û€ªá

4
modules/secrets/secrets.nix
View file

@ -21,8 +21,8 @@ in {
"nextcloud/admin-pass.age".publicKeys = [alarsyo hades]; "nextcloud/admin-pass.age".publicKeys = [alarsyo hades];
"paperless/admin-password.age".publicKeys = [alarsyo poseidon]; "paperless/admin-password.age".publicKeys = [alarsyo hades];
"paperless/secret-key.age".publicKeys = [alarsyo poseidon]; "paperless/secret-key.age".publicKeys = [alarsyo hades];
"restic-backup/boreal-password.age".publicKeys = [alarsyo boreal]; "restic-backup/boreal-password.age".publicKeys = [alarsyo boreal];
"restic-backup/boreal-credentials.age".publicKeys = [alarsyo boreal]; "restic-backup/boreal-credentials.age".publicKeys = [alarsyo boreal];

4
services/paperless.nix
View file

@ -106,12 +106,12 @@ in {
listen = [ listen = [
# FIXME: hardcoded tailscale IP # FIXME: hardcoded tailscale IP
{ {
addr = "100.80.61.67"; addr = "100.115.172.44";
port = 443; port = 443;
ssl = true; ssl = true;
} }
{ {
addr = "100.80.61.67"; addr = "100.115.172.44";
port = 80; port = 80;
ssl = false; ssl = false;
} }