+1

hosts/nixos/eiri/configuration.nix

reviewed

··· 36 36 restic 37 37 vaultwarden 38 38 pocket-id 39 39 + # pds 39 40 40 41 # Mid importance 41 42 graylog

+32

modules/nixos/daemons/pds/default.nix

reviewed

··· 1 1 + { 2 2 + allSecrets, 3 3 + config, 4 4 + inputs, 5 5 + lib, 6 6 + outputs, 7 7 + pkgs, 8 8 + ... 9 9 + }: 10 10 + { 11 11 + age.secrets."bluesky_pds_env" = { 12 12 + rekeyFile = "${inputs.self}/secrets/bluesky_pds_env.age"; 13 13 + # mode = "770"; 14 14 + owner = "pds"; 15 15 + group = "pds"; 16 16 + }; 17 17 + 18 18 + services.bluesky-pds = { 19 19 + enable = true; 20 20 + settings = { 21 21 + PDS_HOSTNAME = allSecrets.global.domain01; 22 22 + PDS_PORT = "3333"; 23 23 + PDS_HOST = "0.0.0.0"; 24 24 + }; 25 25 + environmentFiles = [ 26 26 + # PDS_ADMIN_PASSWORD 27 27 + # PDS_JWT_SECRET 28 28 + # PDS_PLC_ROTATION_KEY_K256_PRIVATE_KEY_HEX 29 29 + config.age.secrets."bluesky_pds_env".path 30 30 + ]; 31 31 + }; 32 32 + }

+1

modules/nixos/default.nix

reviewed

··· 22 22 openssh = import ./daemons/openssh; 23 23 paperless = import ./daemons/paperless; 24 24 pcscd = import ./daemons/pcscd; 25 25 + pds = import ./daemons/pds; 25 26 plex = import ./daemons/plex; 26 27 pocket-id = import ./daemons/pocket-id; 27 28 quadlet = import ./quadlet;

+11

secrets/bluesky_pds_env.age

reviewed

··· 1 1 + age-encryption.org/v1 2 2 + -> piv-p256 RRcsTA Aq9Vr4cSibTrJu9BnXhCrrYMrNMT/S1MpTw98/KUtU72 3 3 + V7nynew+xD0ePqMMuHr8TdDRQj2NthOfhwuzriKMEBI 4 4 + -> piv-p256 IBLnbw ArAN2jSjjXoXvDZf2Httzrix7p4bkUm/Q+HRm1H9mb6h 5 5 + JKWvbedez/DVdofbs4xNxfHRO5egmyRFd6PeXsKcdxE 6 6 + -> ?-grease W 7 7 + FZLMjAtArOO9TOITMvD+N2Eu5kD9EEFjlMH2OC0Vv4XrqNzNATWdcKdn4cPk9iDH 8 8 + cEP3VEanKKQZ0J+vi+g 9 9 + --- 9KvbkZUmmnouebkys88R8A0dpdhegozxIhlYkTIz054 10 10 + ޳L��_�����ޔL�0#��;R|�4!"D��)"+��r �tT��q������MW���*�ge��r�)Aۙ%����y���Q�;H�]B�k�:�� 11 11 + ��X���5�줒�����G��4x-��t��i52L�>5��>q���+��ŁTK�QN�� v8"�x���RI�8Ф��"ed�d8���^���r
U����B��@&�TJ����}�{O~�\��b��x���J��O�

secrets/rekeyed/eiri/8d4fa490b3a5aa5c3e6d85dcf1bd9f6b-bluesky_pds_env.age

reviewed

This is a binary file and will not be displayed.