Joakim Repomaa
ee22668d3e
- Add complete config.txt settings with u-boot boot lines + spi=on - Override sdImage.populateFirmwareCommands to use configtxt module output - Mount firmware partition and add activation script to sync config.txt - Load spi_bcm2835 and bcm2835_gpiomem kernel modules - Add udev rule for gpiomem subsystem (not just gpio) - Relax ProtectKernelTunables so service can access GPIO - Update turny flake input to rppal-based CS pin fix
67 lines
1.9 KiB
Nix
67 lines
1.9 KiB
Nix
{ lib, config, ... }:
|
|
{
|
|
age.secrets =
|
|
lib.listToAttrs (
|
|
map
|
|
(secret: {
|
|
name = secret;
|
|
value = {
|
|
file = ../../secrets/${secret}.age;
|
|
};
|
|
})
|
|
[
|
|
"gotosocial"
|
|
"immich"
|
|
"readeck"
|
|
"storage-box-credentials"
|
|
"vaultwarden"
|
|
"donetick"
|
|
"dnote"
|
|
"mealie"
|
|
"mosquitto/homie"
|
|
"mosquitto/telegraf"
|
|
"mosquitto/openhab"
|
|
"mosquitto/shelly"
|
|
"mosquitto/mokkimaatti"
|
|
"gitlab-runner/default"
|
|
"gitlab-runner/docker"
|
|
"glance/reddit/app-id"
|
|
"glance/reddit/app-secret"
|
|
"hetzner"
|
|
"actual"
|
|
"voidauth"
|
|
"gitea"
|
|
"gitea-actions-runner"
|
|
"searx"
|
|
"open-webui"
|
|
"open-terminal-api-key"
|
|
]
|
|
)
|
|
// {
|
|
smtp-password = {
|
|
file = ../../secrets/smtp-password.age;
|
|
owner =
|
|
if (config.services.grafana.enable) then
|
|
config.systemd.services.grafana.serviceConfig.User
|
|
else
|
|
"root";
|
|
};
|
|
hastebin-tokens = {
|
|
file = ../../secrets/hastebin-tokens.age;
|
|
owner = if (config.services.hastebin.enable) then config.users.users.hastebin.name else "root";
|
|
};
|
|
hledger-basic-auth = {
|
|
file = ../../secrets/hledger-basic-auth.age;
|
|
owner = if (config.services.hledger-web.enable) then "nginx" else "root";
|
|
};
|
|
invidious = lib.mkIf config.services.invidious.enable {
|
|
file = ../../secrets/invidious.age;
|
|
owner = config.systemd.services.invidious.serviceConfig.User;
|
|
};
|
|
"grafana/secret-key" = lib.mkIf config.services.grafana.enable {
|
|
file = ../../secrets/grafana/secret-key.age;
|
|
owner = config.systemd.services.grafana.serviceConfig.User;
|
|
};
|
|
};
|
|
}
|