cnst/cnix
1
0
Fork 0
Code Issues Pull Requests Activity

derp 8

Browse Source
This commit is contained in:
cnst
2025-07-17 18:30:44 +02:00
parent 9d2a1f7232
commit b5f125292f
4 changed files with 15 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
modules/nixos/services/agenix/default.nix
View File

@@ -59,6 +59,7 @@ in {
secrets = {
cloudflareFirewallApiKey.file = "${self}/secrets/cloudflareFirewallApiKey.age";
cloudflareDnsApiToken.file = "${self}/secrets/cloudflareDnsApiToken.age";
cloudflareDnsCredentials.file = "${self}/secrets/cloudflareDnsCredentials.age";
vaultwardenCloudflared.file = "${self}/secrets/vaultwardenCloudflared.age";
vaultwarden-env.file = "${self}/secrets/vaultwarden-env.age";
};

2
modules/server/caddy/default.nix
View File

@@ -30,7 +30,7 @@ in {
dnsResolver = "1.1.1.1:53";
dnsPropagationCheck = true;
group = config.services.caddy.group;
environmentFile = config.age.secrets.cloudflareDnsApiToken.path;
environmentFile = config.age.secrets.cloudflareDnsCredentials.path;
};
};

12
secrets/cloudflareDnsCredentials.age Normal file
View File

@@ -0,0 +1,12 @@
age-encryption.org/v1
-> ssh-ed25519 t9iOEg 4UcR68LQBHIICewKjEzDeZZ2sy/eufapuicsDFZhPVk
mr81olzsrR/u2MYIOogEFN7f4MEvt+N11w74anyPAIk
-> ssh-ed25519 KUYMFA LDuAm0y03mKKcrS60fUzSeWV+fUNm9TXBSI42PiBdGk
LJ+JeQs8SBnQDepY7fXN+Z/9wY80ziMXSX+8Bq9IxUU
-> ssh-ed25519 76RhUQ k7TibLSrwdreQU7Mnoi1hSkmN93WtUiN8IaVozV4RTA
CMKfhQ/yIESwupCyIru9hXpMwsQJkv0zXWIN8Fo44gs
-> ssh-ed25519 Jf8sqw 3riFz9vXLWoWBZGiqDAsD2sEE2l/Ouo9780Ehprn1nI
fnrYMnIRJdr48edtTFVWHIQF8HJGoCxVBUrX8ki/tgA
--- 8mBPxqVFbk9PJdW6bREGID6HRwcxH2xdlHDNKw7kdbM
<EFBFBD><EFBFBD><EFBFBD><EFBFBD>][G<04><><EFBFBD>k<EFBFBD>PoB<6F><42>P%#<23>7<0F><><EFBFBD>73X|7<14><><EFBFBD>6Ò&<26><><EFBFBD>"X<>u<EFBFBD>w}<7D>]_<><5F>*<2A><>"<10>t<EFBFBD>:<3A><11><16>nus<75><73><EFBFBD>
<EFBFBD>S5<EFBFBD><EFBFBD>Q<>><3E><>Ay<41>

1
secrets/secrets.nix
View File

@@ -15,4 +15,5 @@ in {
"cloudflareFirewallApiKey.age".publicKeys = [cnst kima usobotka rsobotka];
"vaultwardenCloudflared.age".publicKeys = [cnst kima usobotka rsobotka];
"cloudflareDnsApiToken.age".publicKeys = [cnst kima usobotka rsobotka];
"cloudflareDnsCredentials.age".publicKeys = [cnst kima usobotka rsobotka];
}