SK-Development-Studios/Nixos-Configuration
2
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Compare commits

base: SK-Development-Studios:59afc00f4b1d5431a747825537556ebdbe2649cc
Branches Tags
SK-Development-Studios:main
...
compare: SK-Development-Studios:182f54b988d93d7e950378a4b43f6bc1697d6dcb
Branches Tags
SK-Development-Studios:main

3 commits
59afc00f4b ... 182f54b988

Author SHA1 Message Date
Jermeiah S
182f54b988
removed certs requirements 2025-06-14 23:05:30 -04:00
Jermeiah S
d0761ff16e
updated secrets 2025-06-14 23:05:20 -04:00
Jermeiah S
5b9e1da49d
fixed permissions and added watch to otf 2025-06-14 23:05:07 -04:00
4 changed files with 7 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

4
configurations/nixos/tofu/default.nix
View file

@ -21,12 +21,10 @@ in
otf = { otf = {
enable = true; enable = true;
environment = { environment = {
# OTF_KEY_FILE=/fixtures/key.pem
# SSL_CERT_FILE=/fixtures/cert.pem
# OTF_LOG_HTTP_REQUESTS = "true";
OTF_ADDRESS = "0.0.0.0:9000"; OTF_ADDRESS = "0.0.0.0:9000";
OTF_HOSTNAME = "tofu.skdevstudios.com"; OTF_HOSTNAME = "tofu.skdevstudios.com";
OTF_DEFAULT_ENGINE = "tofu"; OTF_DEFAULT_ENGINE = "tofu";
OTF_RESTRICT_ORG_CREATION = "true";
}; };
environmentFile = config.sops.secrets.otfenv.path; environmentFile = config.sops.secrets.otfenv.path;
}; };

3
modules/nixos/common/otf.nix
View file

@ -35,7 +35,7 @@ in
]) ])
); );
default = { default = {
OTF_ADDRESS = "localhost:9000"; # OTF_ADDRESS = "localhost:9000";
# OTF_SITE_TOKEN = "my-token"; # OTF_SITE_TOKEN = "my-token";
# OTF_SSL = "false"; # OTF_SSL = "false";
# OTF_SECRET = ""; # OTF_SECRET = "";
@ -87,6 +87,7 @@ in
ExecStart = "${cfg.package}/bin/otfd"; ExecStart = "${cfg.package}/bin/otfd";
Restart = "on-failure"; Restart = "on-failure";
EnvironmentFile = lib.mkIf (cfg.environmentFile != null) cfg.environmentFile; EnvironmentFile = lib.mkIf (cfg.environmentFile != null) cfg.environmentFile;
WatchPaths = lib.mkIf (cfg.environmentFile != null) [ cfg.environmentFile ];
}; };
}; };
}; };

2
modules/nixos/common/sops.nix
View file

@ -15,7 +15,7 @@
otfenv = { otfenv = {
owner = "otf"; owner = "otf";
group = "otf"; group = "otf";
mode = "0440"; mode = "0550";
}; };
}; };
}; };

6
secrets.yaml
View file

@ -1,4 +1,4 @@
otfenv: ENC[AES256_GCM,data:VUNLMOsgnguEgKGhFbV4gbuBLFu6jyR15D+vBoq3pO4UuDwqg91jBBDwsj7SoS9NVdnyI0F+A927w6thraJB1A9ssGluhDt/QQ4HBGCsnKVha0tnL+moccwTQoG1WG5NifBvFglhBD6ry/prCj/v2+RwjQJYebrkFmsgonk8HtForgRhYSevNTNGz1Ik/o22sF0wPSIQkB8t8cS97aY1WKpvrC7g69oXCUKW5wFZUUpYQ/DBBj8=,iv:cnD4LtfD8D/kAw4BQP4etkCubhLlv8xKSqCLgcxhL64=,tag:gKrBOMwuJVK1fpzJ1Mb7+g==,type:str] otfenv: ENC[AES256_GCM,data:WUiT8yCIaC0xMPRwnXN5iOAk7rd9xnwqm1yB0AY753Opt+5pPaQBcueiiC37bdwGtbLBGqHuepaR9Xl3aapNxlebblQH18Y0DUCsGrTvtOUlSVW73h1/3/v3RJbSR6VdlwFFM9WPfqXzWzw3Jz+b1DjJvFYC8sDg0kY/jWoMA5uLiAXwtAGgiRKJN9m0Haumuad5GHIa7hO5aryHQmxuz5Ml8lV9ZP3lGWVZyF/pS/Javz6A7pm41/+9TNAlBE5roDUgcm/oJAm62zdSQvJ/BHP3,iv:7cC5/OeYA4l/kq01tHjk8Iz6nAi78+rrPMUz9R6f440=,tag:VBZwlaVlfJWDEY1p+cH0aA==,type:str]
sops: sops:
age: age:
- recipient: age1ja6zky2xlptgmu04ghp30z9gcyw240p4p8jpqeznt9msmmrwjdjshl6rx3 - recipient: age1ja6zky2xlptgmu04ghp30z9gcyw240p4p8jpqeznt9msmmrwjdjshl6rx3
@ -28,7 +28,7 @@ sops:
Q3E1Y1pOR0NjN1M3RXFueU1YUzdZNm8KvmAh6XclVmdX2hDtRbBuYRF4mSCrIjJ6 Q3E1Y1pOR0NjN1M3RXFueU1YUzdZNm8KvmAh6XclVmdX2hDtRbBuYRF4mSCrIjJ6
P6JYyzB+aZXkbRiw0L7KoHOuQ1LyV0m3LOANcqpUn6phh0CNWxOmlg== P6JYyzB+aZXkbRiw0L7KoHOuQ1LyV0m3LOANcqpUn6phh0CNWxOmlg==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2025-06-15T01:44:03Z" lastmodified: "2025-06-15T02:57:18Z"
mac: ENC[AES256_GCM,data:PtAb0uSPPk4gZ+OeLnJfgvkpNHC/057R8HJjS+jCbsY3LVk8PlH75MA/25uBzwaDzTQ1yd5NMpNF4NJrLSAptK9HrrjUQENjOGLivCWKhT6lB7ITqXwHaiIQWkuLTg+nGKG/99TQQl71JQJ5KgS2Y7Q7jBCdOKdNzGseAWnAc+g=,iv:0/4eF3K8yhoRR+ptlmczj8Hhy80fwHu0rxSnPPAVWnU=,tag:jchwJIsSIXln5iFCXjydeg==,type:str] mac: ENC[AES256_GCM,data:YDeN1yB5ostOfq1YQM7O5KDp3h9x2VUj4AshsEAPwlKeIPXgQFqbRn9ev30Bw6Yw8M/6xCKJsZv6HoGqlRmZhIMDqkzYmPx9wI/jHFRWa8IhadlPKFNkftIdFrreejxy1naw1ylWSJWnTSKvKzzpELFxR2xJp7BGVSJN+hJxOfM=,iv:Dbl7dfcZYWoyNQw1Tg+36mloSwTLUz8tb2xb4b60sZw=,tag:gK59ee3bG40NqOj0Vb9L4A==,type:str]
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.10.2 version: 3.10.2