Configuration for my NixOS based systems and Home Manager
0
fork

Configure Feed

Select the types of activity you want to include in your feed.

Fix coder deployment

+26 -5
+14 -5
host-specific/odin/services.nix
··· 1 - { ... }: 1 + { config, ... }: 2 2 { 3 3 # Some programs need SUID wrappers, can be configured further or are 4 4 # started in user sessions. ··· 30 30 storageDriver = "overlay2"; 31 31 }; 32 32 }; 33 - 33 + age.secrets.coder_client_secret = { 34 + file = ../../secrets/coder-client-secret.age; 35 + owner = "coder"; 36 + group = "coder"; 37 + mode = "660"; 38 + }; 39 + users.users.coder.extraGroups = [ "docker" ]; 34 40 services.coder = { 35 41 enable = true; 36 42 listenAddress = "0.0.0.0:3000"; 43 + accessUrl = "https://coder.ngp.computer"; 37 44 environment.extra = { 38 45 CODER_OIDC_ISSUER_URL = "https://id.ngp.computer"; 39 - CODER_OIDC_EMAIL_DOMAIN = "ngp.computer"; 40 - CODER_OIDC_CLIENT_ID = "test"; 41 - CODER_OIDC_CLIENT_SECRET = "testsecret"; 46 + CODER_OIDC_EMAIL_DOMAIN = "ngp.computer,packetlost.dev"; 47 + CODER_DISABLE_PASSWORD_AUTH = "true"; 48 + CODER_OIDC_SCOPES = "openid,profile,email,offline_access"; 49 + CODER_OAUTH2_GITHUB_DEFAULT_PROVIDER_ENABLE = "false"; 42 50 }; 51 + environment.file = config.age.secrets.coder_client_secret.path; 43 52 }; 44 53 }
+11
secrets/coder-client-secret.age
··· 1 + age-encryption.org/v1 2 + -> ssh-ed25519 OV+2QQ NVSsMV9sm0beuy8jJRQ2UV06ApRpHTUmBbYijE5jliU 3 + j7XS+O/LXcfefZ95kKHuIdeD7riaPKutQH2upRLZ9bk 4 + -> ssh-ed25519 QBbeMw zrYpZF+1inNFUkuoU8ehEMJsZ6c1jw7frpG35HQKuU4 5 + eeAdt3VpLVC748ZDGm0v3+fy6xpAb2M9Ix5GBrqVIqI 6 + -> ssh-ed25519 Wv0Urw 0zPLYZ2/CJ/DXeUdUu0ajg5XNmVrIQDnFdbQaXZMaRs 7 + 3EYA1VwILL7ui9BhvzXco4Q80IJj1aN1Z50HcyLZZHA 8 + -> ssh-ed25519 WVNCXA LoJGdG7ObWiYSnxTOsn2DIWeX20gn4YA79UiexOMjF4 9 + yBYsDs0cFcFv5IAWhmg9hcwCZ/aymXbcH/+sJqIq3Lc 10 + --- 4HUCWRbPEjdvsaDSu/V9cPEKcLgAZtjTFSOxbA3C7zg 11 + �9v^����� KX��a��#s*�V�����o���qUl�. �g������q#������p���7�1�����`�����XI�ј8� �|�ԑ������C����I�+��{ݡ������[&)b'����e�Z_W/�3�ooKD]��>K
+1
secrets/secrets.nix
··· 32 32 "victoria-secret.age".publicKeys = [ misaki ] ++ noah; 33 33 "obsidian-auth-token.age".publicKeys = [ misaki ] ++ noah; 34 34 "pocket-id-encryption-key.age".publicKeys = [ misaki ] ++ noah; 35 + "coder-client-secret.age".publicKeys = [ odin ] ++ noah; 35 36 }