fix(agenix/pihole): add ziggy to agenix pihole secret

This commit is contained in:
2025-09-07 16:02:14 +02:00
parent 6f154ac3b0
commit 0c5991b85b
5 changed files with 13 additions and 1 deletions

View File

@@ -65,6 +65,7 @@
}; };
podman = { podman = {
enable = true; enable = true;
gluetun.enable = true;
qbittorrent = { qbittorrent = {
enable = true; enable = true;
port = 8080; port = 8080;

View File

@@ -50,6 +50,7 @@
}; };
podman = { podman = {
enable = true; enable = true;
gluetun.enable = false;
qbittorrent = { qbittorrent = {
enable = false; enable = false;
port = 8080; port = 8080;

View File

@@ -77,6 +77,11 @@ in
slskd.file = "${self}/secrets/slskd.age"; slskd.file = "${self}/secrets/slskd.age";
}; };
}) })
(mkIf cfg.ziggy.enable {
secrets = {
pihole.file = "${self}/secrets/pihole.age";
};
})
(mkIf cfg.toothpc.enable { (mkIf cfg.toothpc.enable {
secrets = { secrets = {
# Add toothpc specific secrets here # Add toothpc specific secrets here

View File

@@ -10,6 +10,7 @@ in
{ {
options.server.podman = { options.server.podman = {
enable = lib.mkEnableOption "Enables Podman"; enable = lib.mkEnableOption "Enables Podman";
gluetun.enable = lib.mkEnableOption "Enables gluetun";
qbittorrent = { qbittorrent = {
enable = lib.mkEnableOption "Enable qBittorrent"; enable = lib.mkEnableOption "Enable qBittorrent";
url = lib.mkOption { url = lib.mkOption {
@@ -152,7 +153,7 @@ in
]; ];
virtualisation.oci-containers.containers = lib.mkMerge [ virtualisation.oci-containers.containers = lib.mkMerge [
(lib.mkIf cfg.enable { (lib.mkIf cfg.gluetun.enable {
gluetun = { gluetun = {
image = "qmcgaw/gluetun"; image = "qmcgaw/gluetun";
ports = [ ports = [

View File

@@ -3,6 +3,8 @@ let
kima = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJjoPdpiF8pjKN3ZEHeLEwVxoqwcCdzpVVlZkxJohFdg root@cnix"; kima = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJjoPdpiF8pjKN3ZEHeLEwVxoqwcCdzpVVlZkxJohFdg root@cnix";
usobotka = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG5ydTeaWcowmNXdDNqIa/lb5l9w5CAzyF2Kg6U5PSSu cnst@sobotka"; usobotka = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG5ydTeaWcowmNXdDNqIa/lb5l9w5CAzyF2Kg6U5PSSu cnst@sobotka";
rsobotka = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJWLTYWowtpGmGolmkCE7+l9jr5QEnDqRxoezNqAIe+j root@nixos"; rsobotka = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJWLTYWowtpGmGolmkCE7+l9jr5QEnDqRxoezNqAIe+j root@nixos";
uziggy = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICtL8uBsJ3UL4+scqjEcyXYQOVlKziJk9YJ78YP6jCxq cnst@nixos";
rziggy = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHnca8xg1MZ4Hx5k5SVFSxcPnWc1O6r7w7JGYzX9aQm8 root@nixos";
in in
{ {
"cnstssh.age".publicKeys = [ "cnstssh.age".publicKeys = [
@@ -94,6 +96,8 @@ in
kima kima
usobotka usobotka
rsobotka rsobotka
uziggy
rziggy
]; ];
"slskd.age".publicKeys = [ "slskd.age".publicKeys = [
cnst cnst