summary refs log tree commit diff stats
path: root/modules/by-name/et/etesync/module.nix
diff options
context:
space:
mode:
authorSilas Schöffel <sils@sils.li>2025-01-25 21:33:05 +0100
committerSilas Schöffel <sils@sils.li>2025-01-25 21:33:05 +0100
commit1a8fc8ea89d371f4c8b0f4ba505a23b722778f3f (patch)
treed9808d321c6850e28391becb30727c262914576b /modules/by-name/et/etesync/module.nix
parentfix(modules/etebase): migrate to new vhack.persist option (diff)
downloadnixos-server-1a8fc8ea89d371f4c8b0f4ba505a23b722778f3f.zip
feat(etesync): migrate to server2
Diffstat (limited to 'modules/by-name/et/etesync/module.nix')
-rw-r--r--modules/by-name/et/etesync/module.nix10
1 files changed, 9 insertions, 1 deletions
diff --git a/modules/by-name/et/etesync/module.nix b/modules/by-name/et/etesync/module.nix
index b82baa2..bcabc8a 100644
--- a/modules/by-name/et/etesync/module.nix
+++ b/modules/by-name/et/etesync/module.nix
@@ -9,6 +9,10 @@ in {
     enable = lib.mkEnableOption ''
       a secure, end-to-end encrypted, and privacy respecting sync for your contacts, calendars, tasks and notes.
     '';
+    secretFile = lib.mkOption {
+      type = lib.types.path;
+      description = "The age encrypted globale etebase secretfile passed to agenix";
+    };
   };
 
   config = lib.mkIf cfg.enable {
@@ -25,7 +29,7 @@ in {
     };
 
     age.secrets.etebase-server = {
-      file = ./secret_file.age;
+      file = cfg.secretFile;
       mode = "700";
       owner = "etebase-server";
       group = "etebase-server";
@@ -68,5 +72,9 @@ in {
         };
       };
     };
+    users = {
+      users.etebase-server.uid = config.vhack.constants.ids.uids.etebase-server;
+      groups.etebase-server.gid = config.vhack.constants.ids.gids.etebase-server;
+    };
   };
 }