diff options
| -rw-r--r-- | system/secrets/default.nix | 12 | ||||
| -rw-r--r-- | system/services/etebase/default.nix | 9 |
2 files changed, 11 insertions, 10 deletions
diff --git a/system/secrets/default.nix b/system/secrets/default.nix index 79f0f4a..1656cec 100644 --- a/system/secrets/default.nix +++ b/system/secrets/default.nix @@ -1,12 +1,12 @@ {...}: { age = { secrets = { - #etebase-server = { - # file = ./etebase-server/passwd.age; - # mode = "700"; - # owner = "etebase-server"; - # group = "etebase-server"; - #}; + etebase-server = { + file = ./etebase-server/passwd.age; + mode = "700"; + owner = "etebase-server"; + group = "etebase-server"; + }; invidiousHmac = { file = ./invidious/hmac.age; mode = "700"; diff --git a/system/services/etebase/default.nix b/system/services/etebase/default.nix index 2d1a740..5d0284f 100644 --- a/system/services/etebase/default.nix +++ b/system/services/etebase/default.nix @@ -1,8 +1,9 @@ -{config, ...}: { +{ + config, + ... +}: { services.etebase-server = { - # FIXME: etebase uses an insecure database backend - # (django3.2). We should consider alternatives. - enable = false; + enable = true; port = 8001; settings = { global.secret_file = "${config.age.secrets.etebase-server.path}"; |