diff --git a/flake.nix b/flake.nix index d00fe5b..4001317 100644 --- a/flake.nix +++ b/flake.nix @@ -24,7 +24,7 @@ nixosConfigurations = { specialArgs = { inherit inputs; }; modules = [ ./hosts/lkk-nix-1 - agenix.nixosModules.age + agenix.nixosModule ]; }; }; homeConfigurations = { diff --git a/hosts/lkk-nix-1/default.nix b/hosts/lkk-nix-1/default.nix index a03b0fa..8ee960f 100644 --- a/hosts/lkk-nix-1/default.nix +++ b/hosts/lkk-nix-1/default.nix @@ -14,7 +14,7 @@ services.openssh.passwordAuthentication = false; networking = { hostName = "lkk-nix-1"; - firewall.enable = true; + firewall.enable = false; firewall.allowedTCPPortRanges = [{ from = 3000; to = 3100; @@ -26,6 +26,14 @@ } ]; }; + age = { + secrets = { + mj-smtp-user.file = ../../secrets/mj-smtp-user.age; + mj-smtp-pass.file = ../../secrets/mj-smtp-pass.age; + }; + identityPaths = [ "/home/m3tam3re/.ssh/lkk-nix-1" ]; + }; + nix = { gc = { automatic = true; diff --git a/hosts/lkk-nix-1/services/containers/baserow.nix b/hosts/lkk-nix-1/services/containers/baserow.nix index b66dc05..eef7a0f 100644 --- a/hosts/lkk-nix-1/services/containers/baserow.nix +++ b/hosts/lkk-nix-1/services/containers/baserow.nix @@ -1,9 +1,13 @@ -{ - +{ config, outputs, ...}: { virtualisation.oci-containers.containers."baserow" = { image = "docker.io/baserow/baserow:1.13.3"; environment = { BASEROW_PUBLIC_URL = "https://db.lanakk.com"; + EMAIL_SMTP = "in-v3.mailjet.com"; + EMAIL_SMTP_HOST = "in-v3.mailjet.com"; + EMAIL_SMTP_PORT = "587"; + EMAIL_SMTP_USER = config.age.secrets.mj-smtp-user.path; + EMAIL_SMTP_PASSWORD = config.age.secrets.mj-smtp-pass.path; }; ports = [ "3001:80" ]; volumes = [ "baserow_data:/baserow/data" ]; diff --git a/secrets.nix b/secrets.nix index 854dec3..b485410 100644 --- a/secrets.nix +++ b/secrets.nix @@ -1,6 +1,6 @@ let - m3tam3re = "ssh-rsa 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"; + root = "ssh-rsa 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"; in { - "mj-smtp-user.age".publicKeys = [ m3tam3re ]; - "mj-smtp-pass.age".publicKeys = [ m3tam3re ]; + "mj-smtp-user.age".publicKeys = [ root ]; + "mj-smtp-pass.age".publicKeys = [ root ]; }