clerie/nixfiles
1
0
Fork 0
Code

hosts/hydra-1: Migrate to modules harmonia signKeyPaths implementation

Browse Source
This commit is contained in:
clerie 2024-10-24 21:01:48 +02:00
parent 5d45d3aac1
commit f9ab9b4136
Signed by: clerie
GPG Key ID: BD9F56480870BAD2
1 changed files with 4 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
hosts/hydra-1/nix-cache.nix
View File

@ -5,19 +5,11 @@
services.harmonia = { services.harmonia = {
enable = true; enable = true;
settings.bind = "[::1]:5005"; settings.bind = "[::1]:5005";
}; signKeyPaths = [
config.sops.secrets."sign-key-nix-cache.clerie.de".path
systemd.services.harmonia = { config.sops.secrets."sign-key-cache.nix.clerie.de".path
environment = {
SIGN_KEY_PATHS = "%d/key1 %d/key2";
};
serviceConfig = {
LoadCredential = [
"key1:${config.sops.secrets."sign-key-nix-cache.clerie.de".path}"
"key2:${config.sops.secrets."sign-key-cache.nix.clerie.de".path}"
]; ];
}; };
};
services.nginx.virtualHosts = { services.nginx.virtualHosts = {
"nix-cache.clerie.de" = { "nix-cache.clerie.de" = {