new path for updated secret file sharing
This commit is contained in:
@@ -19,7 +19,7 @@ in
|
|||||||
|
|
||||||
# Secret Management
|
# Secret Management
|
||||||
sops = {
|
sops = {
|
||||||
age.keyFile = "./age/keys.txt"; # Make sure to gitignore, contains private key.
|
age.keyFile = "/etc/sops/age/keys.txt";
|
||||||
defaultSopsFormat = "json";
|
defaultSopsFormat = "json";
|
||||||
|
|
||||||
secrets = {
|
secrets = {
|
||||||
@@ -51,8 +51,8 @@ in
|
|||||||
email = "roydumblauskas@gmail.com";
|
email = "roydumblauskas@gmail.com";
|
||||||
dnsProvider = "cloudflare";
|
dnsProvider = "cloudflare";
|
||||||
credentialFiles = {
|
credentialFiles = {
|
||||||
CF_API_EMAIL = config.sops.secrets."cloudflare-api-email".path;
|
CF_API_EMAIL_FILE = config.sops.secrets."cloudflare-api-email".path;
|
||||||
CF_API_KEY = config.sops.secrets."cloudflare-api-key".path;
|
CF_API_KEY_FILE = config.sops.secrets."cloudflare-api-key".path;
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
@@ -61,7 +61,6 @@ in
|
|||||||
|
|
||||||
services.nginx.virtualHosts."roypository.com" = {
|
services.nginx.virtualHosts."roypository.com" = {
|
||||||
forceSSL = true;
|
forceSSL = true;
|
||||||
addSSL = true;
|
|
||||||
enableACME = true;
|
enableACME = true;
|
||||||
acmeRoot = null;
|
acmeRoot = null;
|
||||||
};
|
};
|
||||||
@@ -69,7 +68,6 @@ in
|
|||||||
|
|
||||||
services.nginx.virtualHosts."test.roypository.com" = {
|
services.nginx.virtualHosts."test.roypository.com" = {
|
||||||
forceSSL = true;
|
forceSSL = true;
|
||||||
addSSL = true;
|
|
||||||
enableACME = true;
|
enableACME = true;
|
||||||
acmeRoot = null;
|
acmeRoot = null;
|
||||||
root = "${testSiteIndex}";
|
root = "${testSiteIndex}";
|
||||||
|
|||||||
Reference in New Issue
Block a user