SK-Development-Studios/Nixos-Configuration
2
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

secrets: now fully reliant

Browse source
This commit is contained in:
Jermeiah S 2025-06-14 14:58:50 -04:00
parent 136d9cb3fa
commit 717c5b9880
No known key found for this signature in database
2 changed files with 8 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

13
modules/nixos/common/otf.nix
View file

@ -36,14 +36,11 @@ in
); );
default = { default = {
OTF_ADDRESS = "localhost:9000"; OTF_ADDRESS = "localhost:9000";
OTF_SITE_TOKEN = "my-token"; # OTF_SITE_TOKEN = "my-token";
OTF_SSL = "false"; # OTF_SSL = "false";
# the application needs a secret for encryption and other things # OTF_SECRET = "";
# TODO: make mechanism to load via file # OTF_CERT_FILE = "";
OTF_SECRET = "f73e55eada59bd1c37d69ae3bbacd982"; # OTF_KEY_FILE = "";
# more options can be set but these are a reminder for myself
OTF_CERT_FILE = "";
OTF_KEY_FILE = "";
}; };
description = "Environment variables for the OTF service."; description = "Environment variables for the OTF service.";
}; };

6
secrets.yaml
View file

@ -1,4 +1,4 @@
otfenv: ENC[AES256_GCM,data:di+SAxH65nRJJFhBzKQ0VwRcLT9RrLfr9VLvZQUwfD60YlvWQD6lGoxsbLakdorBVLAFVda5wLxcH1AbhNP4sWkWsNQeI+GJrW8K8rz1,iv:uleGmUbinqQMU+d6jXJrtccKWSUBGAznK4o6zJtxd1Q=,tag:k5+ViYUJugp8glwl1vu2RA==,type:str] otfenv: ENC[AES256_GCM,data:HwZC2IPM9w5FqFlpc/zLA+m9bSC6m19hnvuS103Iwct84QM/HHkez3pdLdCZM5tNZN+oItxMHcIizbcA7mQn1eezdt+Pb9RC4hk=,iv:rcvPhmVEg79XPpJ6o8/DBP4YgN+lgjvxLB1mJYARdCo=,tag:SSZiiKngO+vWjcEppnhARg==,type:str]
sops: sops:
age: age:
- recipient: age1g4j0hun2ttt7h8870zf5pm7nqgw9p23r6mjj9vpm4guqetvth34s8v3t3w - recipient: age1g4j0hun2ttt7h8870zf5pm7nqgw9p23r6mjj9vpm4guqetvth34s8v3t3w
@ -19,7 +19,7 @@ sops:
MlJ1bjRvS0VQMkRFSG0yNDc5Y3lSM28KS50BUA6S61AJYZRefGbW76TotkDOv1FD MlJ1bjRvS0VQMkRFSG0yNDc5Y3lSM28KS50BUA6S61AJYZRefGbW76TotkDOv1FD
Q1CyfEDDkrhbUPtPeOagG3tStP9ZfkRRfmm7TzkB4PfHDTpfAg6V/g== Q1CyfEDDkrhbUPtPeOagG3tStP9ZfkRRfmm7TzkB4PfHDTpfAg6V/g==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2025-06-14T18:26:35Z" lastmodified: "2025-06-14T18:56:57Z"
mac: ENC[AES256_GCM,data:FmHsg5h50Za2WUFe00ZRIw3RR8sKDj2X2ZjtaXhkdcHKMKxvycs9Uh77hHXWK7/70YBxEDv8Ry32lFF+n2tHHC0FFXSXlWyaW0ydiIH/ruHoF/fa5ZnTjFpTxSo1o0iARl+lfe5MjfAyYgplWOxXCzXajgYGZbr4CkMofHQBeuI=,iv:3hOEmXqBv9aupUw89hUd9+s39Pt1//NTZLCb9CXaP9w=,tag:A2PPg7JOuXGXlq6RVUbD6g==,type:str] mac: ENC[AES256_GCM,data:oPKok5QCr8edihXzZUZl3+5Abss6OMas4rYqQZWeLkkIX+b3uzCi0p6KJsZK1SyxZC48Wa4ax8cGLb1BOIQVCjyR80OkXDzQACee9War2LVceXcoT1ARqgl21nthmckLxYzs+YOxWbB3gFQNOD09aeenLpSJUzMM7kDV901sCVg=,iv:ywJaJYj2xrNkgQsWZJF51ZUAwBwMk14eQDe9EC6EXaQ=,tag:GQlHIofanq/yETLbAqS2Nw==,type:str]
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.10.2 version: 3.10.2