mochi/nixos/hosts/shadowfax/config/sops-secrets.nix

108 lines
2.9 KiB
Nix
Raw Normal View History

{ ... }:
{
secrets = {
# Minio
"minio" = {
sopsFile = ../secrets.sops.yaml;
owner = "minio";
group = "minio";
mode = "400";
restartUnits = [ "minio.service" ];
};
# Syncthing
"syncthing/publicCert" = {
sopsFile = ../secrets.sops.yaml;
owner = "jahanson";
mode = "400";
restartUnits = [ "syncthing.service" ];
};
"syncthing/privateKey" = {
sopsFile = ../secrets.sops.yaml;
owner = "jahanson";
mode = "400";
restartUnits = [ "syncthing.service" ];
};
# Prowlarr
"arr/prowlarr/apiKey" = {
sopsFile = ../secrets.sops.yaml;
owner = "prowlarr";
mode = "400";
restartUnits = [ "prowlarr.service" ];
};
"arr/prowlarr/postgres/dbName" = {
sopsFile = ../secrets.sops.yaml;
owner = "prowlarr";
mode = "400";
restartUnits = [ "prowlarr.service" ];
};
"arr/prowlarr/postgres/user" = {
sopsFile = ../secrets.sops.yaml;
owner = "prowlarr";
mode = "400";
restartUnits = [ "prowlarr.service" ];
};
"arr/prowlarr/postgres/password" = {
sopsFile = ../secrets.sops.yaml;
owner = "prowlarr";
mode = "400";
restartUnits = [ "prowlarr.service" ];
};
"arr/prowlarr/postgres/host" = {
sopsFile = ../secrets.sops.yaml;
owner = "prowlarr";
mode = "400";
restartUnits = [ "prowlarr.service" ];
};
# # Sonarr
# "arr/sonarr/apiKey" = {
# sopsFile = ../secrets.sops.yaml;
# owner = "sonarr";
# mode = "400";
# restartUnits = [ "sonarr.service" ];
# };
# "arr/sonarr/postgres/dbName" = {
# sopsFile = ../secrets.sops.yaml;
# owner = "sonarr";
# mode = "400";
# restartUnits = [ "sonarr.service" ];
# };
# "arr/sonarr/postgres/user" = {
# sopsFile = ../secrets.sops.yaml;
# owner = "sonarr";
# mode = "400";
# restartUnits = [ "sonarr.service" ];
# };
# "arr/sonarr/postgres/password" = {
# sopsFile = ../secrets.sops.yaml;
# owner = "sonarr";
# mode = "400";
# restartUnits = [ "sonarr.service" ];
# };
# # Radarr
# "arr/radarr/apiKey" = {
# sopsFile = ../secrets.sops.yaml;
# owner = "radarr";
# mode = "400";
# restartUnits = [ "radarr.service" ];
# };
# "arr/radarr/postgres/dbName" = {
# sopsFile = ../secrets.sops.yaml;
# owner = "radarr";
# mode = "400";
# restartUnits = [ "radarr.service" ];
# };
# "arr/radarr/postgres/user" = {
# sopsFile = ../secrets.sops.yaml;
# owner = "radarr";
# mode = "400";
# restartUnits = [ "radarr.service" ];
# };
# "arr/radarr/postgres/password" = {
# sopsFile = ../secrets.sops.yaml;
# owner = "radarr";
# mode = "400";
# restartUnits = [ "radarr.service" ];
# };
};
}