mc-fucker/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

added invidious env to secrets

Browse source
This commit is contained in:
mc-fucker 2024-04-17 15:52:36 +02:00
parent ac4336ab45
commit 31d3bab859
2 changed files with 15 additions and 14 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

24
modules/generic.nix
View file

@ -53,17 +53,17 @@ in
security.sudo.wheelNeedsPassword = false;
system.autoUpgrade = {
enable = true;
allowReboot = lib.mkDefault true;
dates = "04:00";
randomizedDelaySec = "30min";
};
#system.autoUpgrade = {
# enable = true;
# allowReboot = lib.mkDefault true;
# dates = "04:00";
# randomizedDelaySec = "30min";
#};
services = {
openssh = {
enable = true;
passwordAuthentication = false;
settings.PasswordAuthentication = false;
extraConfig = "ClientAliveInterval 60";
};
@ -117,12 +117,12 @@ in
# due to compability issues
#virtualisation.podman.autoPrune.enable = config.virtualisation.podman.enable;
nix.gc = {
automatic = lib.mkDefault true;
options = lib.mkDefault "--delete-older-than 2d";
};
#nix.gc = {
# automatic = lib.mkDefault true;
# options = lib.mkDefault "--delete-older-than 2d";
#};
boot.cleanTmpDir = true;
boot.tmp.cleanOnBoot = true;
imports = [
./zabbix-agent.nix

5
secrets/secrets.yaml
View file

@ -18,6 +18,7 @@ ihatemoney:
env: ENC[AES256_GCM,data:tvrell8MY0mIYJgmbpxMROlXSYk8M8mueViVDApAsyCwknmGIiOX9d1TrYhy38c59MdVrnkFZVeRDFSvP9Ts0iFlZGiC3JUa2Gohx3xJvNrFbQXuyu6sgDVZKxf4vwYNlxBb5sCO4atfYP/wug4MBrwWI563pMULu/kGGxP4K+EjoDdnOYJzabhrPsz8POC06nT9qHYI8BfB4Rc/vYPaB9+HMiD9uy3x0wx90a40KbwuiMSwQMvy54CHlQIGU+/46ejKAnNFBCrnEcwGiZAFpLPRO3LM2MPouJ8VFXplj8ID79NSqPmtJyP9OrFDJE2Wokk4MWSmAP5touQTOrrs7YLThQf2qwVz1GSYCO3Nm7gu15ELGbsfAZwoJet3D0DR3vFTHMXv7P3TPMFCIx/VtKCT5ILFs0tre0VeP56qdVKoJ7i5MTITBcisZUXazXQELh2nfavj7dw69g==,iv:t4l+xWk3VTifP8HNQxrDnl0CsGtwE60wdKltjEWxrMY=,tag:brxmRwjN8DOSyYweFoa7JQ==,type:str]
invidious:
db: ENC[AES256_GCM,data:9KzrxFfp4pjyNNmLB5OJHxABm4n1BQw+xo6/yvs7oTQPnDHpPp2tWA==,iv:A04RaDmwLfXSzgvZZxPE9rl0/2YGlJq+UcTja92Gih0=,tag:4jirsOim4Rnuc/EF2mPmow==,type:str]
env: ENC[AES256_GCM,data:aCyvyyK+oftllLStlL0PHLzFrmcPYS4KRiSoJsnYkZfTKIfe/vaHeXaAl93cuRipicafG1IggiL8FJ4KjvaMyz3gq+UtTy5GceRQ4xS9BaVdkJRH5vJ4ds3eqjQRuZk4VLNSLjaEUotOjhjoGxblLsyqeIXsbP4tUdfVPOomD9i9g6jQDPtE3jCN4oZoOp6HCYZDxz1zwu2+UjfcAmiCL9XihSL0a/DmhHdm,iv:dn+votjcpsJ5lTQYZxEJfD0qsuzdiC3xuIMg0Vqvfwk=,tag:yFAukcoKAsZBsttgo9fabw==,type:str]
lldap:
admin: ENC[AES256_GCM,data:axo68K9FOevl777fPDl5DHGd4rOuKPJEhWKe+S3qxqrXRRliZFL8Jw==,iv:3jPGyfDlewKCxhTPN/LA1EbcUnwZvE5DP1gbbLIMaxU=,tag:xZyc3ux0gMkZHqE/FH8p9g==,type:str]
jwt: ENC[AES256_GCM,data:9Mt+xJPk1w5F9bXlR5LWlUIyfi2f8wW3R+FKfASwNF+LbSdgi4W7VLqhAoN7pfD5z4kdCshKJhKSZ0lQ4CTM4sbKMsKPefjn+3Fr5epBh7Bj6RgOxaY1I4cuqHkm9QkB9tHRrg==,iv:DvMFm6QvHK8Iz02HGvbb/4sEj6/koVJ8ftFyo5HMBm0=,tag:mK6IyNEQHkumyiF/uUgcLA==,type:str]
@ -134,8 +135,8 @@ sops:
emdEU3AwZ2M1NlRsSU5xS0hlZExUYmsK+pq6iur8hI5M462FJimX7P1WZ3j9iykj
XQK1+fvImHwYVDi27TAHuwlfB3sGsfXRD876zh+2EknjJJFETL59MQ==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-10T11:56:55Z"
mac: ENC[AES256_GCM,data:ArmZ+CA+eJLzgf7dI+smlYU4Nm34GL3NqBJMyIFK9ooqsPYbFUSOQeZep1ePwQQCRglZSns2BHJNnSLfsN0O2JPrQp0s9/KqPJOI1ZPSaDWx6/HAVB02iA9fMSF5CcAQPwoCG2nOErQDDSAJlXzY6LmkGFVT6zPYuk6U+aze7sw=,iv:j6QHdcc//oDf9MZUrjYoY60olplKCRlo5o5af+bAln8=,tag:+GfP3vKffn1ePOu5s1JT7Q==,type:str]
lastmodified: "2024-04-17T13:51:19Z"
mac: ENC[AES256_GCM,data:WA7e9qAo9+Czk2ZA8FsEh8Q9pONgxKvZyeyPaXKNowoEYcpdzq7y2HI0fKLgRw08w7o4YQMrjRxOO3GVLrRE+qYZYRP94WR/m5xk5unARWL8CFPzjEsCqngiBiUp358u6JqadoUnpIxcOj1YrLAfXOm79dnGBVD602wrfwRgDfc=,iv:fZSL0h58HOaM3G1oo2g/ReDZfJh0aDG8W727Ztz2iUw=,tag:v/lgEbSUGCEI04VqYB1udg==,type:str]
pgp: []
unencrypted_suffix: _unencrypted
version: 3.8.1