uku/flake
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(etna): use LoadCredential for dendrite key

Browse source
This commit is contained in:
uku 2024-07-29 10:31:58 +02:00
parent 5fb0e92992
commit 429d4d49de
Signed by: uku
SSH key fingerprint: SHA256:4P0aN6M8ajKukNi6aPOaX0LacanGYtlfjmN+m/sHY/o
1 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
systems/etna/dendrite.nix
View file

@ -3,7 +3,7 @@
mkSecret,
...
}: {
age.secrets = mkSecret "dendriteKey" {mode = "444";};
age.secrets = mkSecret "dendriteKey" {};
cfTunnels."m.uku.moe" = "http://localhost:80";
systemd.services.dendrite = {
@ -22,10 +22,12 @@
in {
enable = true;
httpPort = 8008;
loadCredential = ["private_key:${config.age.secrets.dendriteKey.path}"];
settings = {
global = {
server_name = "m.uku.moe";
private_key = config.age.secrets.dendriteKey.path;
private_key = "$CREDENTIALS_DIRECTORY/private_key";
inherit database;
};