Ivan Malison
e7a455ced9
Add NixOS module to host org-agenda-api container on railbird-sf: - org-agenda-api-host.nix: New module with nginx reverse proxy and ACME - nginx configured for rbsf.tplinkdns.com with automatic TLS - Container runs on port 51847 (random high port) - Supports nix-built container images via imageFile option Configure railbird-sf to use the new module: - Build org-agenda-api container from flake - Pass container to machine config via specialArgs - Set up agenix secret for container environment Note: Requires creating secrets file with AUTH_PASSWORD and GIT_SSH_PRIVATE_KEY environment variables. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
27 lines
1.5 KiB
Nix
27 lines
1.5 KiB
Nix
let keys = (import ../keys.nix);
|
|
in
|
|
{
|
|
"gpg-keys.age".publicKeys = keys.agenixKeys;
|
|
"gpg-passphrase.age".publicKeys = keys.agenixKeys;
|
|
"cache-priv-key.pem.age".publicKeys = keys.agenixKeys;
|
|
"gitea-runner-token.biskcomp.age".publicKeys = keys.agenixKeys;
|
|
"gitea-runner-token.ryzen-shine.age".publicKeys = keys.agenixKeys;
|
|
"gitea-runner-token.nixquick.age".publicKeys = keys.agenixKeys;
|
|
"gitea-runner-token.jimi-hendnix.age".publicKeys = keys.agenixKeys;
|
|
"gitea-runner-token.adele.age".publicKeys = keys.agenixKeys;
|
|
"gitea-runner-token.railbird-sf.age".publicKeys = keys.agenixKeys ++ keys.railbird-sf;
|
|
"gitea-runner-token.mac-demarco-mini.age".publicKeys = keys.agenixKeys ++ keys.railbird-sf;
|
|
"gitea-runner-token.age".publicKeys = keys.agenixKeys ++ keys.railbird-sf;
|
|
"nextcloud-admin.age".publicKeys = keys.agenixKeys;
|
|
"ryzen-shine-kubernetes-token.age".publicKeys = keys.agenixKeys;
|
|
"1896Folsom-k3s-token.age".publicKeys = keys.agenixKeys ++ keys.railbird-sf;
|
|
"api_service_account_key.json.age".publicKeys = keys.agenixKeys;
|
|
"k3s-registry.yaml.age".publicKeys = keys.agenixKeys ++ keys.railbird-sf;
|
|
"discourse-admin-password.age".publicKeys = keys.hostKeys;
|
|
"discourse-secret-key-base.age".publicKeys = keys.hostKeys;
|
|
"vaultwarden-environment-file.age".publicKeys = keys.hostKeys;
|
|
"org-api-passwords.age".publicKeys = keys.hostKeys ++ keys.kanivanKeys ++ keys.railbird-sf;
|
|
"google-assistant-integration-service-key.age".publicKeys = keys.hostKeys ++ keys.kanivanKeys;
|
|
"zwave-js.json.age".publicKeys = keys.hostKeys ++ keys.kanivanKeys;
|
|
}
|