m3tam3re
/
nix-configurations
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

+vaultwarden

This commit is contained in:
m3tam3re 2023-07-04 09:18:47 +02:00
parent 66fe8c6fce
commit 58f52d3ecb
4 changed files with 22 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
hosts/lkk-nix-1/default.nix
View File

@ -32,6 +32,11 @@
mj-smtp-pass.file = ../../secrets/mj-smtp-pass.age; mj-smtp-pass.file = ../../secrets/mj-smtp-pass.age;
tailscale-key.file = ../../secrets/tailscale-key.age; tailscale-key.file = ../../secrets/tailscale-key.age;
vaultwarden-env = {
file = ../../secrets/vaultwarden-env.age;
mode = "770";
};
n8n-env = { n8n-env = {
file = ../../secrets/n8n-env.age; file = ../../secrets/n8n-env.age;
mode = "770"; mode = "770";

1
hosts/lkk-nix-1/services/default.nix
View File

@ -12,5 +12,6 @@
./syncthing.nix ./syncthing.nix
./tailscale.nix ./tailscale.nix
./traefik.nix ./traefik.nix
./vaultwarden.nix
]; ];
} }

11
hosts/lkk-nix-1/services/traefik.nix
View File

@ -85,6 +85,8 @@
minio-console.loadBalancer.servers = minio-console.loadBalancer.servers =
[{ url = "http://localhost:9001/"; }]; [{ url = "http://localhost:9001/"; }];
metabase.loadBalancer.servers = [{ url = "http://localhost:3013/"; }]; metabase.loadBalancer.servers = [{ url = "http://localhost:3013/"; }];
vaultwarden.loadBalancer.servers =
[{ url = "http://localhost:3014/"; }];
}; };
routers = { routers = {
api = { api = {
@ -273,6 +275,15 @@
service = "metabase"; service = "metabase";
entrypoints = "websecure"; entrypoints = "websecure";
}; };
vaultwarden = {
rule = "Host(`vw.lanakk.com`)";
tls = {
certResolver = "godaddy";
domains = "vw.lanakk.com";
};
service = "metabase";
entrypoints = "websecure";
};
}; };
}; };
}; };

7
secrets.nix
View File

@ -1,5 +1,6 @@
let let
system = "ssh-rsa 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"; system =
"ssh-rsa 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";
in { in {
"mj-smtp-user.age".publicKeys = [ system ]; "mj-smtp-user.age".publicKeys = [ system ];
"mj-smtp-pass.age".publicKeys = [ system ]; "mj-smtp-pass.age".publicKeys = [ system ];
@ -13,7 +14,7 @@ in {
"tailscale-key.age".publicKeys = [ system ]; "tailscale-key.age".publicKeys = [ system ];
"wg-key.age".publicKeys = [ system ]; "wg-key.age".publicKeys = [ system ];
"briefkasten-env.age".publicKeys = [ system ]; "briefkasten-env.age".publicKeys = [ system ];
"littlelink-lanakk-env.age".publicKeys = [ system ]; "littlelink-lanakk-env.age".publicKeys = [ system ];
@ -22,4 +23,6 @@ in {
"traefik-env.age".publicKeys = [ system ]; "traefik-env.age".publicKeys = [ system ];
"minio-system-cred.age".publicKeys = [ system ]; "minio-system-cred.age".publicKeys = [ system ];
"vaultwarden-env.age".publicKeys = [ system ];
} }