moved users password secret file
This commit is contained in:
parent
70d1b98ce2
commit
1be145193e
5 changed files with 5 additions and 6 deletions
|
@ -122,7 +122,6 @@
|
||||||
};
|
};
|
||||||
|
|
||||||
sops = {
|
sops = {
|
||||||
defaultSopsFile = ../../secrets/secrets.yaml;
|
|
||||||
defaultSopsFormat = "yaml";
|
defaultSopsFormat = "yaml";
|
||||||
gnupg.sshKeyPaths = [];
|
gnupg.sshKeyPaths = [];
|
||||||
|
|
||||||
|
|
|
@ -49,9 +49,9 @@
|
||||||
|
|
||||||
config = {
|
config = {
|
||||||
# virtualisation.oci-containers.containers.pihole = {
|
# virtualisation.oci-containers.containers.pihole = {
|
||||||
# image = "pihole/pihole:latest";
|
# image = "pihole/pihole:2024.07.0";
|
||||||
# environment = {
|
# environment = {
|
||||||
# TZ = "America/Chicago"; # TODO: set this to the systems timezone
|
# TZ = time.timeZone;
|
||||||
# WEBPASSWORD_FILE = "..."; # TODO: set this from secrets file/config that is set to secrets file (I think this also needs to be mounted in volumns?)
|
# WEBPASSWORD_FILE = "..."; # TODO: set this from secrets file/config that is set to secrets file (I think this also needs to be mounted in volumns?)
|
||||||
# };
|
# };
|
||||||
# volumes = [
|
# volumes = [
|
||||||
|
|
|
@ -16,7 +16,7 @@ in {
|
||||||
sops.secrets = lib.mkIf cfg.isFullUser {
|
sops.secrets = lib.mkIf cfg.isFullUser {
|
||||||
"passwords/ester" = {
|
"passwords/ester" = {
|
||||||
neededForUsers = true;
|
neededForUsers = true;
|
||||||
# sopsFile = ../secrets.yaml;
|
sopsFile = ../../secrets/user-passwords.yaml;
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
|
|
|
@ -16,7 +16,7 @@ in {
|
||||||
sops.secrets = lib.mkIf cfg.isFullUser {
|
sops.secrets = lib.mkIf cfg.isFullUser {
|
||||||
"passwords/eve" = {
|
"passwords/eve" = {
|
||||||
neededForUsers = true;
|
neededForUsers = true;
|
||||||
# sopsFile = ../secrets.yaml;
|
sopsFile = ../../secrets/user-passwords.yaml;
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
|
|
|
@ -21,7 +21,7 @@ in {
|
||||||
sops.secrets = lib.mkIf (cfg.isFullUser || cfg.isThinUser) {
|
sops.secrets = lib.mkIf (cfg.isFullUser || cfg.isThinUser) {
|
||||||
"passwords/leyla" = {
|
"passwords/leyla" = {
|
||||||
neededForUsers = true;
|
neededForUsers = true;
|
||||||
# sopsFile = ../secrets.yaml;
|
sopsFile = ../../secrets/user-passwords.yaml;
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue