SebastianStork/nixos-config
1
0
Fork 0
mirror of https://github.com/SebastianStork/nixos-config.git synced 2026-01-21 23:11:34 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Remove redundant group assignments for sops secrets

Browse source
This commit is contained in:
SebastianStork 2025-05-24 15:31:52 +02:00
parent 529bf4abec
commit 9bfcf3b023
3 changed files with 11 additions and 26 deletions
Download patch file Download diff file Expand all files Collapse all files

26
modules/system/hedgedoc/default.nix
View file

@ -8,7 +8,6 @@ let
cfg = config.myConfig.hedgedoc;
user = config.users.users.hedgedoc.name;
inherit (config.users.users.hedgedoc) group;
manage_users = "CMD_CONFIG_FILE=/run/hedgedoc/config.json NODE_ENV=production ${lib.getExe' pkgs.hedgedoc "manage_users"}";
in
@ -27,24 +26,17 @@ in
config = lib.mkIf cfg.enable {
sops = {
secrets = {
"hedgedoc/seb-password" = {
owner = user;
inherit group;
};
"hedgedoc/gitlab-auth-secret" = {
owner = user;
inherit group;
};
};
templates."hedgedoc/environment" = {
owner = user;
inherit group;
content = "GITLAB_CLIENTSECRET=${config.sops.placeholder."hedgedoc/gitlab-auth-secret"}";
};
secrets = {
"hedgedoc/seb-password".owner = user;
"hedgedoc/gitlab-auth-secret".owner = user;
};
templates."hedgedoc/environment" = {
owner = user;
content = "GITLAB_CLIENTSECRET=${config.sops.placeholder."hedgedoc/gitlab-auth-secret"}";
};
};
services.hedgedoc = {
enable = true;