nixos/hosts/server/secrets.nix

53 lines
1.2 KiB
Nix

{ inputs, ... }:
{
imports = [ inputs.agenix.nixosModules.default ];
age.identityPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
age.secrets."mailjet-user" = {
file = ../../secrets/mailjet-user.age;
owner = "root";
group = "root";
mode = "0400";
};
age.secrets."mailjet-pass" = {
file = ../../secrets/mailjet-pass.age;
owner = "root";
group = "root";
mode = "0400";
};
age.secrets."authentik-env" = {
file = ../../secrets/authentik-env.age;
owner = "root";
group = "root";
mode = "0400";
};
age.secrets."auth-grafana-id" = {
file = ../../secrets/auth-grafana-id.age;
owner = "root";
group = "grafana";
mode = "0440";
};
age.secrets."auth-grafana-secret" = {
file = ../../secrets/auth-grafana-secret.age;
owner = "root";
group = "grafana";
mode = "0440";
};
age.secrets."auth-nextcloud-id" = {
file = ../../secrets/auth-nextcloud-id.age;
owner = "root";
group = "nextcloud";
mode = "0440";
};
age.secrets."auth-nextcloud-secret" = {
file = ../../secrets/auth-nextcloud-secret.age;
owner = "root";
group = "nextcloud";
mode = "0440";
};
}