107 lines
2.8 KiB
Nix
107 lines
2.8 KiB
Nix
{
|
|
pkgs,
|
|
inputs,
|
|
config,
|
|
...
|
|
}: let
|
|
vars = import ../../vars.nix;
|
|
in {
|
|
imports = [
|
|
inputs.sops-nix.nixosModules.sops
|
|
];
|
|
|
|
environment.systemPackages = with pkgs; [sops];
|
|
|
|
sops.defaultSopsFile = ../../secrets/franz.yaml;
|
|
sops.defaultSopsFormat = "yaml";
|
|
sops.age.keyFile = "/home/${vars.user}/.config/sops/age/keys.txt";
|
|
|
|
sops.secrets."cloudflared/tunnel_token" = {
|
|
owner = vars.user;
|
|
};
|
|
|
|
sops.secrets."traefik/acme_email" = {
|
|
owner = vars.user;
|
|
};
|
|
sops.secrets."traefik/cloudflare_email" = {
|
|
owner = vars.user;
|
|
};
|
|
sops.secrets."traefik/cloudflare_api_key" = {
|
|
owner = vars.user;
|
|
};
|
|
|
|
sops.secrets."nextcloud/mysql_root_password" = {
|
|
owner = vars.user;
|
|
};
|
|
sops.secrets."nextcloud/mysql_password" = {
|
|
owner = vars.user;
|
|
};
|
|
sops.secrets."nextcloud/mysql_database" = {
|
|
owner = vars.user;
|
|
};
|
|
sops.secrets."nextcloud/mysql_user" = {
|
|
owner = vars.user;
|
|
};
|
|
|
|
sops.templates."cloudflared.env" = {
|
|
path = "/home/${vars.user}/.docker/infrastructure/cloudflared.env";
|
|
owner = vars.user;
|
|
mode = "0775";
|
|
content = ''
|
|
TUNNEL_TOKEN="${config.sops.placeholder."cloudflared/tunnel_token"}"
|
|
'';
|
|
};
|
|
|
|
sops.templates."traefik.env" = {
|
|
path = "/home/${vars.user}/.docker/infrastructure/traefik.env";
|
|
owner = vars.user;
|
|
mode = "0775";
|
|
content = ''
|
|
CLOUDFLARE_EMAIL="${config.sops.placeholder."traefik/cloudflare_email"}"
|
|
CLOUDFLARE_API_KEY="${config.sops.placeholder."traefik/cloudflare_api_key"}"
|
|
'';
|
|
};
|
|
|
|
sops.templates."nextcloud.env" = {
|
|
path = "/home/${vars.user}/.docker/nextcloud/nextcloud.env";
|
|
owner = vars.user;
|
|
mode = "0775";
|
|
content = ''
|
|
MYSQL_ROOT_PASSWORD="${config.sops.placeholder."nextcloud/mysql_root_password"}"
|
|
MYSQL_PASSWORD="${config.sops.placeholder."nextcloud/mysql_password"}"
|
|
MYSQL_DATABASE="${config.sops.placeholder."nextcloud/mysql_database"}"
|
|
MYSQL_USER="${config.sops.placeholder."nextcloud/mysql_user"}"
|
|
'';
|
|
};
|
|
|
|
sops.templates."traefik.toml" = {
|
|
path = "/home/${vars.user}/.docker/infrastructure/traefik_data/traefik.toml";
|
|
owner = vars.user;
|
|
mode = "0775";
|
|
content = ''
|
|
[entryPoints]
|
|
[entryPoints.web]
|
|
address = ":80"
|
|
[entryPoints.websecure]
|
|
address = ":443"
|
|
[api]
|
|
dashboard = true
|
|
insecure = true
|
|
|
|
[certificatesResolvers.letsencrypt.acme]
|
|
email = "${config.sops.placeholder."traefik/acme_email"}"
|
|
storage = "/letsencrypt/acme.json"
|
|
[certificatesResolvers.letsencrypt.acme.dnsChallenge]
|
|
provider = "cloudflare"
|
|
resolvers = ["1.1.1.1:53", "1.0.0.1:53"]
|
|
|
|
[serversTransport]
|
|
insecureSkipVerify = true
|
|
|
|
[providers.docker]
|
|
watch = true
|
|
network = "web"
|
|
exposedByDefault = false
|
|
'';
|
|
};
|
|
}
|