ashisgreat22
6ada19e490
- Fix Redis connection by using container-to-container networking. - Apply Catppuccin (Mocha/Latte) theme via custom CSS. - Enable SearXNG module in host configuration. - Configure Caddy reverse proxy and DDclient for search.ashisgreat.xyz.
86 lines
2.1 KiB
Nix
86 lines
2.1 KiB
Nix
{
|
|
config,
|
|
pkgs,
|
|
inputs,
|
|
...
|
|
}:
|
|
|
|
{
|
|
sops.defaultSopsFile = ../secrets/secrets.yaml;
|
|
sops.defaultSopsFormat = "yaml";
|
|
|
|
sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
|
|
# sops.age.keyFile = "/home/ashie/.config/sops/age/keys.txt";
|
|
# WireGuard / Gluetun secrets
|
|
sops.secrets.wireguard_private_key = {
|
|
owner = "ashie";
|
|
};
|
|
sops.secrets.wireguard_public_key = {
|
|
owner = "ashie";
|
|
};
|
|
sops.secrets.wireguard_endpoint_ip = {
|
|
owner = "ashie";
|
|
};
|
|
sops.secrets.wireguard_endpoint_port = {
|
|
owner = "ashie";
|
|
};
|
|
sops.secrets.wireguard_addresses = {
|
|
owner = "ashie";
|
|
};
|
|
sops.secrets.wireguard_preshared_key = {
|
|
owner = "ashie";
|
|
};
|
|
|
|
sops.secrets.open_webui_env = {
|
|
owner = "ashie";
|
|
};
|
|
|
|
sops.templates."gluetun.env" = {
|
|
owner = "ashie";
|
|
content = ''
|
|
WIREGUARD_PUBLIC_KEY=${config.sops.placeholder.wireguard_public_key}
|
|
WIREGUARD_ENDPOINT_IP=${config.sops.placeholder.wireguard_endpoint_ip}
|
|
WIREGUARD_ENDPOINT_PORT=${config.sops.placeholder.wireguard_endpoint_port}
|
|
WIREGUARD_PRIVATE_KEY=${config.sops.placeholder.wireguard_private_key}
|
|
WIREGUARD_ADDRESSES=${config.sops.placeholder.wireguard_addresses}
|
|
WIREGUARD_PRESHARED_KEY=${config.sops.placeholder.wireguard_preshared_key}
|
|
WIREGUARD_MTU=1320
|
|
VPN_SERVICE_PROVIDER=custom
|
|
VPN_TYPE=wireguard
|
|
'';
|
|
};
|
|
|
|
# Cloudflare secrets
|
|
sops.secrets.cloudflare_api_key = { };
|
|
|
|
# Unified API Key
|
|
sops.secrets.master_api_key = {
|
|
owner = "ashie";
|
|
};
|
|
|
|
sops.templates."api_key.env" = {
|
|
owner = "ashie";
|
|
content = ''
|
|
OPENAI_API_KEY=${config.sops.placeholder.master_api_key}
|
|
API_KEY=${config.sops.placeholder.master_api_key}
|
|
KEY=${config.sops.placeholder.master_api_key}
|
|
JWT_SECRET=${config.sops.placeholder.jwt_secret}
|
|
'';
|
|
};
|
|
|
|
sops.secrets.jwt_secret = {
|
|
owner = "ashie";
|
|
};
|
|
|
|
sops.secrets.hashed_password = {
|
|
neededForUsers = true;
|
|
};
|
|
|
|
sops.templates."caddy.env" = {
|
|
owner = "caddy";
|
|
group = "caddy";
|
|
content = ''
|
|
CF_API_TOKEN=${config.sops.placeholder.cloudflare_api_key}
|
|
'';
|
|
};
|
|
}
|