dot013/spacestation
1
0
Fork 0
Code Issues Pull Requests Activity

fix: set hex file for anubis instances

Browse Source
This commit is contained in:
Guz
2025-04-05 17:22:44 -03:00
parent 8034f111cd
commit a9cea7c75f
4 changed files with 16 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
capytal/analytics.nix
View File

@@ -22,5 +22,6 @@ in {
metricsBind = ":${toString (port + 3)}"; metricsBind = ":${toString (port + 3)}";
serveRobotsTxt = true; serveRobotsTxt = true;
target = "http://localhost:${toString port}"; target = "http://localhost:${toString port}";
ed25519PrivateKeyHexFile = config.sops.secrets."medama/anubis/hexFile".path;
}; };
} }

1
capytal/network.nix
View File

@@ -23,6 +23,7 @@
metricsBind = ":${toString (forgejo-port + 30)}"; metricsBind = ":${toString (forgejo-port + 30)}";
serveRobotsTxt = true; serveRobotsTxt = true;
target = "http://localhost:${toString forgejo-port}"; target = "http://localhost:${toString forgejo-port}";
ed25519PrivateKeyHexFile = config.sops.secrets."forgejo/anubis/hexFile".path;
}; };
}; };

7
secrets.nix
View File

@@ -50,6 +50,13 @@ in {
sops.secrets."forgejo/git-password" = mkIf config.services.forgejo.enable { sops.secrets."forgejo/git-password" = mkIf config.services.forgejo.enable {
owner = config.services.forgejo.user; owner = config.services.forgejo.user;
}; };
sops.secrets."forgejo/anubis/hexFile" = {
owner = config.services.anubis.instances."forgejo".user;
};
sops.secrets."medama/anubis/hexFile" = {
owner = config.services.anubis.instances."medama".user;
};
sops.secrets."cloudflared/tunnel-env" = {}; sops.secrets."cloudflared/tunnel-env" = {};

9
secrets/spacestation.yaml
View File

@@ -13,6 +13,11 @@ forgejo:
name: ENC[AES256_GCM,data:UL3g,iv:+ftGx57fhzN06DuLItxZTc7lXX2g4MhqrEqnDjk4Aug=,tag:ZNpwWuPYhBzDjRQBKikCDA==,type:str] name: ENC[AES256_GCM,data:UL3g,iv:+ftGx57fhzN06DuLItxZTc7lXX2g4MhqrEqnDjk4Aug=,tag:ZNpwWuPYhBzDjRQBKikCDA==,type:str]
password: ENC[AES256_GCM,data:9nMuj2/VIB7Pbw==,iv:+96/NZ+gmRkpXr05nFuUfRl2rGqElUA/LuMBYBQHCHQ=,tag:hMEO40iGeyWsMd8VPOV4Yg==,type:str] password: ENC[AES256_GCM,data:9nMuj2/VIB7Pbw==,iv:+96/NZ+gmRkpXr05nFuUfRl2rGqElUA/LuMBYBQHCHQ=,tag:hMEO40iGeyWsMd8VPOV4Yg==,type:str]
email: ENC[AES256_GCM,data:e6GOwBzRBxa00CHYHgV8,iv:oerF3kJWzjzOatND8Tngp3MADw2kaBKyigeFxtH/ypQ=,tag:1q093JG9hRDxs6OzOIU3vw==,type:str] email: ENC[AES256_GCM,data:e6GOwBzRBxa00CHYHgV8,iv:oerF3kJWzjzOatND8Tngp3MADw2kaBKyigeFxtH/ypQ=,tag:1q093JG9hRDxs6OzOIU3vw==,type:str]
anubis:
hexFile: ENC[AES256_GCM,data:6hMIQUiSYYNkhrGGHHHIF6Ur+dQeXDuUTHZR4Tnl3O/T/phC7q881Gta6LCUJVvgQJ8hF2aKafggTUDsjcaI3g==,iv:3aGmqM8gV5YsdFNGCgZ4L9t8r9c0zubqZOE1eDBAong=,tag:/nB357mXDJJMRNoQ4E/KQQ==,type:str]
medama:
anubis:
hexFile: ENC[AES256_GCM,data:INM0j8uPSV60nEyGJ2/+nH1IDVL08hvBzTULBHPbChQVdYO+Z/UCI1aKCLoCwad0NAp+rAljYotZ0NxlxfjnmQ==,iv:y9F70r7erFOBe94rvv3/3P+N8SwFgW39hRcfP2SjFMA=,tag:PnjbQcCDbB/8XPJc+hM5dA==,type:str]
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
@@ -28,8 +33,8 @@ sops:
amRmVkVoS2RqeEs3OXZVeTlsZUVEV28K1WcbGJHT8LMah5b7NN1psiucTl1OfZYO amRmVkVoS2RqeEs3OXZVeTlsZUVEV28K1WcbGJHT8LMah5b7NN1psiucTl1OfZYO
4T3RDSQMB3qj1TGQSdixjwRRKbMGtL3LXnvkNd+caVi5Z9OkF1O9Yg== 4T3RDSQMB3qj1TGQSdixjwRRKbMGtL3LXnvkNd+caVi5Z9OkF1O9Yg==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2025-04-04T23:36:47Z" lastmodified: "2025-04-05T16:54:29Z"
mac: ENC[AES256_GCM,data:CkcI8nfzNw9aBPDxyWdVAVXTjy5vIrRwgVfTtRGwPL2BlX8K6kOehSfCOgSv0LMGgKfhUeB//0AxFnuwUFU2r91jLFeFefNkXUung2VwlxBCE9WG6O2h3IHjysdlVcOs9+ljvTvelADqYYGTgIUAjPnbzT2EyA9C+qGC9+IqbXo=,iv:dpcd0BJbpYS6MjjFv1XUKfvo4vUYZTuNqaHaMYft23U=,tag:9XHQX2mt6rN1JSiy+7IfKQ==,type:str] mac: ENC[AES256_GCM,data:Kl2iN6R3C3WcRgDTG71Ev1KEeDlO+/y1Jck8f6q10zbB5SxXk73wmDtxOSM+Loqan2WVVyd1cYc0Lk6PiA5hMaC1svt5tIuvGlW8G2tXZgZAXdBMuYTYlWkq4ti977KNy4PwbfmWHemWQDdH4io/4oX3G6ZONKhNfOuP6ooRCd4=,iv:goYEGnDjFEGr9Dx564vTvfJN8tnmER6LX2nkG7RqG80=,tag:v2ur4o5zhvQ0ksK7xOhzLw==,type:str]
pgp: [] pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.9.4 version: 3.9.4