jolheiser
/
dotnix
mirror of https://git.jolheiser.com/dotnix.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

wip: dex 

Signed-off-by: jolheiser <john.olheiser@gmail.com>
jolheiser 2024-02-27 21:58:16 -06:00
parent 783c19ac13
commit e272f2ba68
Signed by: jolheiser
GPG Key ID: B853ADA5DA7BBF7A
4 changed files with 26 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
machines/dragonwell/default.nix
View File

@ -2,7 +2,7 @@ let
username = "jolheiser";
key = ''ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfKqCWtDlS3tgvfT6hQN+ii8UtabIZ+ZNmYN+bLwIa8PHOEW5MbfaqXSlhKkSi4+7SfQDCHphw0SMfhsQ4qMEcoywZ+4niDgKlQEVkl+S/VGbLuPe92NRStkyreZBLPr3Rh7ScNlGHcmHmoV9v7725fMnsMmabGVhpGO84PwNHOfJyv2tx2h6LxFbAV8S44UQu2lc8YLWCK2UvKuRnBerBXLnDQThUUX8UuCFzb786gQzD5XDU0MENbByxiy0XdVGAC+tFXEiSIgFZlFbFYyShgdTP9MzX2MOglEi+ae+1UIFncraW7ptUey7qHFJylpHWWWvE+GTwsg2G50i0FvFj jolheiser@jolheiser'';
in {
imports = [./caddy.nix ./golink.nix ./gotosocial.nix ./restic.nix ./ugit.nix ./hardware.nix];
imports = [./caddy.nix ./dex.nix ./golink.nix ./gotosocial.nix ./restic.nix ./ugit.nix ./hardware.nix];
boot.tmp.cleanOnBoot = true;
zramSwap.enable = true;

24
machines/dragonwell/dex.nix 100644
View File

@ -0,0 +1,24 @@
{config, ...}: {
age.secrets.dex.file = ../../secrets/personal/dex.age;
services.dex = {
enable = true;
settings = {
issuer = "https://auth.jolheiser.com";
storage = {
type = "sqlite3";
config.file = "/var/lib/dex/dex.db";
};
web.http = "localhost:2884";
enablePasswordDB = true;
staticPasswords = [
{
email = "john@jolheiser.com";
hash = "$DEX_JOLHEISER_HASH";
username = "jolheiser";
userID = "$DEX_JOLHEISER_UID";
}
];
};
environmentFile = config.age.secrets.dex.path;
};
}

BIN
secrets/personal/dex.age 100644
View File

Binary file not shown.

1
secrets/secrets.nix
View File

@ -21,4 +21,5 @@ in {
"personal/restic-env.age".publicKeys = [jolheiser dragonwell];
"personal/restic-pass.age".publicKeys = [jolheiser dragonwell];
"personal/restic-repo.age".publicKeys = [jolheiser dragonwell];
"personal/dex.age".publicKeys = [jolheiser dragonwell];
}