SebastianStork/nixos-config
1
0
Fork 0
mirror of https://github.com/SebastianStork/nixos-config.git synced 2026-01-21 21:01:34 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Move secrets decryption from containers to server

Browse source
This commit is contained in:
SebastianStork 2024-09-22 19:10:52 +02:00
parent a4abd033cc
commit a7e1ced2a2
13 changed files with 58 additions and 196 deletions
Download patch file Download diff file Expand all files Collapse all files

12
hosts/stratus/containers/nspawn/paperless/default.nix
View file

@ -4,21 +4,17 @@ let
subdomain = "paper";
in
{
sops.secrets."container/paperless/admin-password" = { };
containers.${serviceName}.config =
{
config,
dataDir,
...
}:
{ dataDir, ... }:
{
imports = [ ./backup.nix ];
sops.secrets."admin-password" = { };
services.paperless = {
enable = true;
inherit dataDir;
passwordFile = config.sops.secrets."admin-password".path;
passwordFile = "/run/secrets/container/paperless/admin-password";
settings.PAPERLESS_OCR_LANGUAGE = "deu+eng";
};