uku/flake
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(etna): use LoadCredential for dendrite key

Browse source
This commit is contained in:
uku 2024-07-29 10:31:58 +02:00
parent 5fb0e92992
commit 429d4d49de
Signed by: uku
SSH key fingerprint: SHA256:4P0aN6M8ajKukNi6aPOaX0LacanGYtlfjmN+m/sHY/o
1 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
systems/etna/dendrite.nix
View file

@ -3,7 +3,7 @@
mkSecret, mkSecret,
... ...
}: { }: {
age.secrets = mkSecret "dendriteKey" {mode = "444";}; age.secrets = mkSecret "dendriteKey" {};
cfTunnels."m.uku.moe" = "http://localhost:80"; cfTunnels."m.uku.moe" = "http://localhost:80";
systemd.services.dendrite = { systemd.services.dendrite = {
@ -22,10 +22,12 @@
in { in {
enable = true; enable = true;
httpPort = 8008; httpPort = 8008;
loadCredential = ["private_key:${config.age.secrets.dendriteKey.path}"];
settings = { settings = {
global = { global = {
server_name = "m.uku.moe"; server_name = "m.uku.moe";
private_key = config.age.secrets.dendriteKey.path; private_key = "$CREDENTIALS_DIRECTORY/private_key";
inherit database; inherit database;
}; };