+1

secrets/secrets.nix

··· 8 8 "jellyfin-rpc.json.age".publicKeys = [ adam ]; 9 9 "wakatime.cfg.age".publicKeys = [ adam ]; 10 10 11 11 + "vaultwarden.env.age".publicKeys = [ seber ]; 11 12 "ssl-adamperkowski.cert.pem.age".publicKeys = [ seber ]; 12 13 "ssl-adamperkowski.key.pem.age".publicKeys = [ seber ]; 13 14 }

secrets/vaultwarden.env.age

This is a binary file and will not be displayed.

-1

systems/miku/default.nix

··· 41 41 42 42 services.jellyfin = { 43 43 enable = true; 44 44 - package = pkgs.jellyfin; 45 44 openFirewall = true; 46 45 }; 47 46

-6

systems/modules/systemd-boot.nix

··· 1 1 - { 2 2 - boot.loader = { 3 3 - systemd-boot.enable = true; 4 4 - efi.canTouchEfiVariables = true; 5 5 - }; 6 6 - }

+33

systems/seber/default.nix

··· 30 30 age = { 31 31 identityPaths = [ "/home/adam/.ssh/id_ed25519" ]; 32 32 secrets = { 33 33 + vaultwarden-env = { 34 34 + file = ../../secrets/vaultwarden.env.age; 35 35 + mode = "0400"; 36 36 + owner = "vaultwarden"; 37 37 + }; 33 38 ssl-adamperkowski-cert = { 34 39 file = ../../secrets/ssl-adamperkowski.cert.pem.age; 35 40 mode = "0440"; ··· 60 65 sslCertificate = "/run/agenix/ssl-adamperkowski-cert"; 61 66 sslCertificateKey = "/run/agenix/ssl-adamperkowski-key"; 62 67 }; 68 68 + 69 69 + "vault.adamperkowski.dev" = { 70 70 + locations."/" = { 71 71 + proxyPass = "http://127.0.0.1:8222"; 72 72 + extraConfig = '' 73 73 + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 74 74 + proxy_set_header X-Forwarded-Proto $scheme; 75 75 + proxy_set_header Host $host; 76 76 + ''; 77 77 + }; 78 78 + 79 79 + onlySSL = true; 80 80 + sslCertificate = "/run/agenix/ssl-adamperkowski-cert"; 81 81 + sslCertificateKey = "/run/agenix/ssl-adamperkowski-key"; 82 82 + }; 83 83 + }; 84 84 + }; 85 85 + 86 86 + services.vaultwarden = { 87 87 + enable = true; 88 88 + environmentFile = "/run/agenix/vaultwarden-env"; 89 89 + config = { 90 90 + DOMAIN = "https://vault.adamperkowski.dev"; 91 91 + SIGNUPS_ALLOWED = false; 92 92 + ROCKET_ADDRESS = "127.0.0.1"; 93 93 + ROCKET_PORT = 8222; 94 94 + ROCKET_LOG = "critical"; 95 95 + LOG_LEVEL = "warn"; 63 96 }; 64 97 }; 65 98