41 lines
954 B
Nix
41 lines
954 B
Nix
{ lib, config, ... }:
|
|
{
|
|
age.secrets =
|
|
lib.listToAttrs (
|
|
map
|
|
(secret: {
|
|
name = secret;
|
|
value = {
|
|
file = ../../secrets/${secret}.age;
|
|
};
|
|
})
|
|
[
|
|
"gotosocial"
|
|
"immich"
|
|
"readeck"
|
|
"storage-box-credentials"
|
|
"vaultwarden"
|
|
"donetick"
|
|
"dnote"
|
|
"octodns"
|
|
"mealie"
|
|
"gitlab-runner/default"
|
|
"gitlab-runner/docker"
|
|
]
|
|
)
|
|
// {
|
|
smtp-password = {
|
|
file = ../../secrets/smtp-password.age;
|
|
owner =
|
|
if (config.services.grafana.enable) then
|
|
config.systemd.services.grafana.serviceConfig.User
|
|
else
|
|
"root";
|
|
};
|
|
hastebin-tokens = {
|
|
file = ../../secrets/hastebin-tokens.age;
|
|
owner = if (config.services.hastebin.enable) then config.users.users.hastebin.name else "root";
|
|
};
|
|
};
|
|
}
|