dump-dvb/nix-config
dump-dvb/nix-config
3
0
Fork 0
mirror of https://github.com/dump-dvb/nix-config.git synced 2024-06-18 13:46:04 +02:00
Code Issues Projects Releases Wiki Activity

removed key wg-seckey-staging

Browse Source
This commit is contained in:
Tassilo - 2022-05-31 21:33:03 +02:00
parent b3c37b6f71
commit c804f16034
Signed by: revol-xut
GPG Key ID: 4F56FF7759627D07
4 changed files with 5 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
hosts/staging/configuration.nix
View File

@ -70,7 +70,7 @@
dvb-dump.domain = "staging.dvb.solutions";
networking.wg-quick.interfaces.wg-dvb = {
address = [ "10.13.37.5/32" ];
privateKeyFile = config.sops.secrets.wg-seckey-staging.path;
privateKeyFile = config.sops.secrets.wg-seckey.path;
postUp = '' ${pkgs.iputils}/bin/ping -c 10 10.13.37.1 || true '';
peers = [
{

2
modules/data-hoarder/clicky-bunty.nix
View File

@ -40,7 +40,7 @@ in
path = [ pkgs.sudo config.services.postgresql.package ];
script = ''
sudo -u ${config.services.postgresql.superUser} psql -c "ALTER ROLE dvbdump WITH PASSWORD '$(cat /root/postgres_password)'"
sudo -u ${config.services.postgresql.superUser} psql -c "ALTER ROLE dvbdump WITH PASSWORD '$(cat ${config.sops.secrets.postgres_password.path})'"
'';
};
};

1
modules/data-hoarder/secrets.nix
View File

@ -3,7 +3,6 @@
sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
sops.secrets = {
wg-seckey-staging = { };
wg-seckey = { };
postgres_password_hash_salt = {
owner = config.users.users.clicky-bunty-server.name;

6
secrets/data-hoarder-staging/secrets.yaml
View File

@ -1,4 +1,4 @@
wg-seckey-staging: ENC[AES256_GCM,data:7ZDE0ePdbjzoHXyJSAIJ/Eryp9nZAEH8OTaej9/lGtSiuLAWdB+4Y/EhgfU=,iv:YlhiQvGJaxpYN1AsLDvpWbA1xq+W/8NB4L2uBQNbiy4=,tag:Nl8GEaGjLqTh6Iq51rgYkQ==,type:str]
wg-seckey: ENC[AES256_GCM,data:5EKx3CSnN7NkDmtWcYhBQg5OPi6vJNPFhUwCOiUSs6sCy7QeG4OGSQG3OIM=,iv:JlDx+EGVzCMLjJbVTL8wJw7+Zgc0Nlee+3G/sqxZBlY=,tag:ZKOyI78XFYKphuyNGQUvHQ==,type:str]
postgres_password: ENC[AES256_GCM,data:gHujC1YtssY=,iv:CI/oVto6ncK6l2QF7IsTQ/ca954LH/GFmZgZQ43u1zc=,tag:gVH4DvEzyJqNOgyjoCbgIQ==,type:str]
postgres_password_hash_salt: ENC[AES256_GCM,data:bHt2y+gknmwlgOw=,iv:QDeMNauoCfC7egIkGUb/Ecp6vfZ/UxqjtTL6V3sadHM=,tag:vVjTBPT8KCkglp2SGGmo7g==,type:str]
sops:
@ -25,8 +25,8 @@ sops:
cmRkeUpBdzdleG1aMDRiWTk5NFBQbWsKQqAdbF9+1U2Y/CUNxt/u7zOc7vfZmuCK
HxT0x7I0I3r5m3OKrIvN7CSfXTZ5tE601DfYr4i92dvRvD46J/JbUw==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2022-05-31T19:26:07Z"
mac: ENC[AES256_GCM,data:SsqSSFTOVe5thim+2DMYaAvE0suRVD2qrXYZvx1FSRzegd0aiOX1Kes7vAtvY2X5ulQfKXrNAr1GWe/b9IP9iEcOzn9yBVxQ31u4rINQKqYh5ySBPbtR0l3whe2P5QdZdfXeQ8IcPdFXaRCurKRX8jLMxq0LyC4GPNC8vdXLkgA=,iv:HohR+vPGnZK0Eybbc5UB2g20mcIE540ocdLg+iId7os=,tag:pziHLELfrk9It1DzIfLTbA==,type:str]
lastmodified: "2022-05-31T19:31:22Z"
mac: ENC[AES256_GCM,data:3aiEQYJ/EcrZsC608oilgjj8CgIDr66TvT+DhK73d65u3Jx73B/GPqhEdc1G8CgFoMbttUauQ0aOvxHoLGumUEXg/BI9b3enaO48Gb0ZicuO7qGmofvRv7lN+FEIqXujxYQ28dA6bqFjWIaYCF8aybHMIfKd4ST7Xdc5qu4xBeg=,iv:0Z9q+ZPCYafaxlS5Lqpz6NqrU4XsaPfPSZasAkTcLaQ=,tag:KiF9FaIh0sUSnSDS2FyOqg==,type:str]
pgp:
- created_at: "2022-05-29T14:13:53Z"
enc: |-