adriangl
/
nix-dotfiles
mirror of https://github.com/adrlau/nix-dotfiles.git
1
2
Fork 0
Code Issues Packages Projects Releases Wiki Activity

fixed secret perms

This commit is contained in:
Adrian Gunnar Lauterer 2023-12-10 18:34:28 +01:00
parent 0903e94482
commit 168197505d
2 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
profiles/sops.nix
View File

@ -25,7 +25,5 @@
# This is the actual specification of the secrets. # This is the actual specification of the secrets.
#sops.secrets."myservice/my_subdir/my_secret" = {}; #sops.secrets."myservice/my_subdir/my_secret" = {};
sops.secrets."acme/certs" = { };
sops.secrets."nginx/defaultpass" = { };
} }

7
services/nginx.nix
View File

@ -19,6 +19,13 @@
users.users.nginx.extraGroups = [ "acme" ]; users.users.nginx.extraGroups = [ "acme" ];
users.users.root.extraGroups = [ "acme" ]; users.users.root.extraGroups = [ "acme" ];
#declare secrets
sops.secrets."acme/certs" = { };
sops.secrets."nginx/defaultpass" = {
restartUnits = [ "nginx.service" ];
owner = "nginx";
};
#TODO add oauth2 proxy to auth #TODO add oauth2 proxy to auth
# services.oauth2_proxy = { # services.oauth2_proxy = {
# enable = true; # enable = true;