This commit is contained in:
2024-12-27 18:09:48 +02:00
parent e45426d183
commit 7e7a4a4067
2 changed files with 5 additions and 9 deletions

View File

@@ -41,14 +41,10 @@
defaultSopsFile = ./secrets.yaml;
age.sshKeyPaths = [ "/root/id_ed25519" ];
secrets.github-access-token = { };
secrets.namecheap-api-user = { };
secrets.namecheap-api-key = { };
secrets.namecheap-api-user = { mode = "0440"; group = "acme"; };
secrets.namecheap-api-key = { mode = "0440"; group = "acme"; };
};
nix.extraOptions = ''
!include /run/secrets/github-access-token
!include /run/secrets/namecheap-api-user
!include /run/secrets/namecheap-api-key
'';
nix.extraOptions = "!include /run/secrets/github-access-token";
system.autoUpgrade = {
enable = true;

View File

@@ -29,8 +29,8 @@
extraDomainNames = [ "*.kyren.codes" ];
dnsProvider = "namecheap";
environmentFile = "${pkgs.writeText "namecheap-creds" ''
NAMECHEAP_API_USER=${builtins.readFile "/run/secrets/namecheap-api-user"}
NAMECHEAP_API_KEY=${builtins.readFile "/run/secrets/namecheap-api-key"}
NAMECHEAP_API_USER_FILE=/run/secrets/namecheap-api-user
NAMECHEAP_API_KEY_FILE=/run/secrets/namecheap-api-key
''}";
};
};