will-holdsworth/dots
1
1
Fork 0
Code Issues 22 Pull requests Projects 1 Releases Packages Wiki Activity Actions 1

cleanup porkbun secret

Browse source
This commit is contained in:
wi11-holdsworth 2025-07-29 14:30:34 +10:00
parent 4363c64619
commit 95a48af464
4 changed files with 7 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

6
modules/nixos/features/nginx.nix
View file

@ -8,8 +8,8 @@ let
in in
{ {
config = lib.mkIf config.${feature}.enable { config = lib.mkIf config.${feature}.enable {
age.secrets."api-porkbun" = { age.secrets."porkbun-api" = {
file = ../../../secrets/api-porkbun.age; file = ../../../secrets/porkbun-api.age;
}; };
services.${feature} = { services.${feature} = {
@ -36,7 +36,7 @@ in
group = "${feature}"; group = "${feature}";
dnsProvider = "porkbun"; dnsProvider = "porkbun";
dnsPropagationCheck = true; dnsPropagationCheck = true;
credentialsFile = config.age.secrets."api-porkbun".path; credentialsFile = config.age.secrets."porkbun-api".path;
}; };
}; };

8
secrets/api-porkbun.age
View file

@ -1,8 +0,0 @@
age-encryption.org/v1
-> ssh-ed25519 LtK9yQ 3IfuOhEd6O3fwpovZNGe5phUxEyawaNLQaghm2CMICs
F7V16p9va1ghnBlPxeRgzub2YdGnw0vv8Kb5WfPtl6Y
-> ssh-ed25519 qLT+DQ cL8BORJ2yfk0KFFDNagXi1W7XYZVdKj0cU/XsW7chCs
fJ0Qd5pH7+i82OAtBUA0WthOOAA8pEaqnxKhpkwCH00
--- sHXToVDlsHDq/eZERrUOAkM+u1tIRpNGzOLjrk1nnYg
®ÂôÙ#tñ/!í7eß6¹'G„ü9[,À§„½:ÿÁcä$ŽÊ  è-×¥+b”6£ÁѺÕ×8jÜ×9”º©U-e°ä<C2B0>‰ÛÂÈÂÞ»p¨õ­Š7ilE¼ºR± >â‘wûØ—QüV˜q<CB9C>Û×Í>#›óuÍâåÓêν%}ÊPXL‹O迵!~êE’ì'¢h´IGqãÑÌûÿÌNéÉð±<C3B0>'jQšçDZœr&´%+›
Dë°i¦gÝf»Ôê¨ÚÇ~nðõ55ÂÏÚ

BIN
secrets/porkbun-api.age Normal file
View file

Binary file not shown.

6
secrets/secrets.nix
View file

@ -2,11 +2,12 @@ let
srv = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOeV0NxqIGIXXgLYE6ntkHE4PARceZBp1FTI7kKLBbk8"; srv = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOeV0NxqIGIXXgLYE6ntkHE4PARceZBp1FTI7kKLBbk8";
will = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPHAnTQP77HQ/8nbf1oX7xftfKYtbH6MSh83wic0qdBy"; will = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPHAnTQP77HQ/8nbf1oX7xftfKYtbH6MSh83wic0qdBy";
users = [ users = [
srv will]; srv
will
];
in in
{ {
"api-porkbun.age".publicKeys = users;
"api-miniflux.age".publicKeys = users; "api-miniflux.age".publicKeys = users;
"borgbackup-server-offsite.age".publicKeys = users; "borgbackup-server-offsite.age".publicKeys = users;
"borgbackup-server-onsite.age".publicKeys = users; "borgbackup-server-onsite.age".publicKeys = users;
@ -17,6 +18,7 @@ in
"lidarr.age".publicKeys = users; "lidarr.age".publicKeys = users;
"miniflux-creds.age".publicKeys = users; "miniflux-creds.age".publicKeys = users;
"paperless.age".publicKeys = users; "paperless.age".publicKeys = users;
"porkbun-api.age".publicKeys = users;
"prowlarr.age".publicKeys = users; "prowlarr.age".publicKeys = users;
"radarr.age".publicKeys = users; "radarr.age".publicKeys = users;
"sonarr.age".publicKeys = users; "sonarr.age".publicKeys = users;