nixos/hosts/server/secrets.nix

49 lines
1 KiB
Nix

{ inputs, ... }:
{
imports = [ inputs.agenix.nixosModules.default ];
age.identityPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
age.secrets."mailjet-user" = {
file = ../../secrets/mailjet-user.age;
owner = "root";
group = "root";
mode = "0400";
};
age.secrets."mailjet-pass" = {
file = ../../secrets/mailjet-pass.age;
owner = "root";
group = "root";
mode = "0400";
};
age.secrets."nextcloud-admin-pass" = {
file = ../../secrets/nextcloud-admin-pass.age;
owner = "nextcloud";
group = "nextcloud";
mode = "0400";
};
age.secrets."nextcloud-database" = {
file = ../../secrets/nextcloud-database.age;
owner = "nextcloud";
group = "nextcloud";
mode = "0400";
};
age.secrets."kanidm-admin" = {
file = ../../secrets/kandim-admin.age;
owner = "kanidm";
group = "kanidm";
mode = "0400";
};
age.secrets."kanidm-idmAdmin" = {
file = ../../secrets/kandim-idmAdmin.age;
owner = "kanidm";
group = "kanidm";
mode = "0400";
};
}