summaryrefslogtreecommitdiffstats
path: root/system
diff options
context:
space:
mode:
authorSoispha <soispha@vhack.eu>2023-08-11 09:28:16 +0200
committerSoispha <soispha@vhack.eu>2023-08-11 09:42:44 +0200
commit320cc252c1e59de8fed8993b3a527839bc0963a6 (patch)
tree6d1e39b942f1861d8aece09c8598ca88b35efb21 /system
parentFix(system/services/invidious): Quote attr names in json config (diff)
downloadnixos-server-320cc252c1e59de8fed8993b3a527839bc0963a6.zip
Refactor(system/secrets/invidious): Remove unneeded files and improve names
Diffstat (limited to 'system')
-rw-r--r--system/secrets/default.nix10
-rw-r--r--system/secrets/invidious/hmac.tix (renamed from system/secrets/invidious/settings.tix)0
-rw-r--r--system/secrets/invidious/passwd.tix16
-rw-r--r--system/services/invidious/default.nix4
4 files changed, 3 insertions, 27 deletions
diff --git a/system/secrets/default.nix b/system/secrets/default.nix
index 345354c..2269672 100644
--- a/system/secrets/default.nix
+++ b/system/secrets/default.nix
@@ -13,15 +13,9 @@
owner = "matrix-synapse";
group = "matrix-synapse";
};
- invidious = {
- file = ./invidious/passwd.tix;
+ invidiousHmac = {
+ file = ./invidious/hmac.tix;
mode = "700";
- owner = "invidious";
- group = "invidious";
- };
- invidiousSettings = {
- file = ./invidious/settings.tix;
- mode = "744";
owner = "root";
group = "root";
};
diff --git a/system/secrets/invidious/settings.tix b/system/secrets/invidious/hmac.tix
index f760fa9..f760fa9 100644
--- a/system/secrets/invidious/settings.tix
+++ b/system/secrets/invidious/hmac.tix
diff --git a/system/secrets/invidious/passwd.tix b/system/secrets/invidious/passwd.tix
deleted file mode 100644
index beaee32..0000000
--- a/system/secrets/invidious/passwd.tix
+++ /dev/null
@@ -1,16 +0,0 @@
------BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQeHpwZFZEWXc0cGxZZ2dV
-WDkvUmVFWXE5azZ1VlREM090bWJ6elgxR3hFCmhnNkhWZWVqdmxEcUJVTnFZaGw1
-YnVOYmpYOGd5YU1EaDlmc0ZrNk0zT0EKLT4gWDI1NTE5IEwyL1ptVzJ2bUdvSW1n
-TzNod1BKZHQ3YXhUMkl5ZzRiT2Y3aUt0NGw4RVUKWTF3ampTMG1DYTBYTFcwNEp6
-bkFWbGl6WEVCcVdhQnVWY0piQ1VHMzk0SQotPiBzc2gtZWQyNTUxOSBPRDhUNGcg
-TnFGVkQxTndPZ1l4c2J5dzNmT1YrZ0dQYytIMmtxaTN2Y01uZFdXOThqWQo2TDkv
-MUJzc3BON1JwbGN3OW44WWZ5WUxWdWU2UnpJczVYVHBsdUFmdllJCi0+IHg5YmFB
-eS1ncmVhc2UgYl9hXWlgIC5fIGpLaU1wWiN4ICczCkVmOHRibWptbDBxOS9Ic1VC
-L0tFQXo5Sk45TDFlQlB5bnFleUF0dFlMSmdvd2dmUlZ3Ci0tLSBIN0MvMEduQVlR
-bDVTQUxvZjB2TTljdjZkbGphN1l1QnZESWNZUjZzd1dVCmCWuxwFj1FyTEFasr8X
-apyuQkXs6Cvfx82qMvwE1G4SLOEulJjVp/VDcICQ8RE8BE0HJGRjG64FqdtbHY2K
-tPMADqfz/jt7kbXKSwB6zOHE9VNcTrGl+mx2Ki8HUG8GElj+hE2m0cWdGijcsGVW
-lo2HKPa7F/d9vBUC9sLYo8U5VrnIRhBN1s4ECfAa4vj2RSsCZePCHkJMH7qFPGuC
-PZST
------END AGE ENCRYPTED FILE-----
diff --git a/system/services/invidious/default.nix b/system/services/invidious/default.nix
index d03dee4..7a37f50 100644
--- a/system/services/invidious/default.nix
+++ b/system/services/invidious/default.nix
@@ -3,11 +3,9 @@
enable = true;
database = {
createLocally = true;
- #passwordFile = "${config.age.secrets.invidious.path}";
- #host = "localhost";
};
domain = "invidious.vhack.eu";
nginx.enable = true;
- extraSettingsFile = "${config.age.secrets.invidiousSettings.path}";
+ extraSettingsFile = "${config.age.secrets.invidiousHmac.path}";
};
}