uku/flake
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Compare commits

base: uku:8e4d67ad2237d5aa51ff18cf4b26ba89f97dddf2
Branches Tags
uku:main
...
compare: uku:b8040ec72d5730cf1db197df777d6d5d5b82150b
Branches Tags
uku:main

3 commits
8e4d67ad22 ... b8040ec72d

Author SHA1 Message Date
uku
b8040ec72d
fix(systems/etna): don't chown cloudflared secret 
upstream switched the service to a dynamic user
 2025-03-20 11:44:49 +01:00
uku
591367639f
chore(systems/etna): modify api-rs secret 2025-03-20 11:44:28 +01:00
uku
157fed470a
flake.lock: Update 
Flake lock file updates:

• Updated input 'api-rs':
    'github:uku3lig/api-rs/4ea686b2171e65d21439e5c9324ef4c8f58dc1a9?narHash=sha256-FtKYaWu6edx3LLw8UdKOTLH4Gb0hztVuTsk7F53X/dI%3D' (2025-03-18)
  → 'github:uku3lig/api-rs/dd5dd7ec8c53a6b750cd0c2c452b1a23e1c0bbdb?narHash=sha256-LlA7/hGvUqcWtlL7WeYJwmhsx30J26LVpxu03ZvVSis%3D' (2025-03-20)
 2025-03-20 11:44:08 +01:00
3 changed files with 20 additions and 23 deletions
Download patch file Download diff file Expand all files Collapse all files

6
flake.lock generated
View file

@ -53,11 +53,11 @@
] ]
}, },
"locked": { "locked": {
"lastModified": 1742286645, "lastModified": 1742467351,
"narHash": "sha256-FtKYaWu6edx3LLw8UdKOTLH4Gb0hztVuTsk7F53X/dI=", "narHash": "sha256-LlA7/hGvUqcWtlL7WeYJwmhsx30J26LVpxu03ZvVSis=",
"owner": "uku3lig", "owner": "uku3lig",
"repo": "api-rs", "repo": "api-rs",
"rev": "4ea686b2171e65d21439e5c9324ef4c8f58dc1a9", "rev": "dd5dd7ec8c53a6b750cd0c2c452b1a23e1c0bbdb",
"type": "github" "type": "github"
}, },
"original": { "original": {

32
secrets/etna/apiRsEnv.age
View file

@ -1,18 +1,18 @@
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsVmFVZFM1aEhqdkt3eFJF YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCWEk5Rm1reHVnZzVoU1pp
VkNxeURqa1lZVk9iT0NDbmhHdERKNGV5cTNJCkZRd2dycnI3V1o1R2lXc3cyNVpP WjdZTVhvWUFvblJRNmt0QjJQL3B1bVZxU2lFCi9hQkJZalovbE1JczZxU0J1V2Ux
dzUrWVljYVZlVTQ2bzRMOWh6aFBjMkEKLT4gWDI1NTE5IGd1bHRRR0pTMWpnOEQ3 RnpzS01pWWZIdmZoNG9zR0NuZnozTDgKLT4gWDI1NTE5IDI2MS95bURVbU01ZjIx
cFJrVnJiTGw2aE92THFJRW9XdlRtbUtSckV3VUUKUjhMWXBGc2tieWNWblJyZG4x M2txNkZBa3hSQ2sxTno4U04xMUMyTDA5Y0V5U0kKbTdqNFM0Q1N6SzZFR282RXZG
WTBoT1hJZkhmeElWWDZKcWtBTkp2TUpxYwotPiBYMjU1MTkgTXYvQjRoWW9LVWRp cUc3bU90SmFpOHo0bGYvbU1NaVJtVDZVMAotPiBYMjU1MTkgcmF4dnhsU20xMUxu
TUVLRHJoekx5OG5jNU5rbHE2VTZHam9YQ2tBZzkxRQp6NmNLblUwNE5JNnljMWJm eExOR3UxaVJoY0VBVkk5aElENitkc0w5VzlKYlZscwpmajhDQkUxUmllNGhTc1ZP
SENYUG1RT3NOSTdIKzJsdk1sVzRCbXZZenFNCi0+IFgyNTUxOSBJY3FtT1dBMXR5 MTFYWDhLbUNGa05KQ25pUmMwQmpOUkJUMlRNCi0+IFgyNTUxOSBBZVkyNFk4RElm
Z21mT1hNZWlnR3JRcTNTbTZqZlAwcW1mRzhoaEsydG1JCi9PRlRKRUI1emZCdWhC QWc1allWcTA1cGJ1ajh6V2FwYjIxZUhMZkR4Z1ZzSlFNCjlRRkVvUVRZc2tVOVFY
WG1rblQvNnBiK3g1SzZ5WlBrQ0JGYWthRG9BcFUKLS0tIGwrUjI3bFhjTElVYm82 dU45RTV0RUVVQ2dyRVc4NmprUUgwWkVyZ0R4UU0KLS0tIC8vT1FMTkM1czVtZlRy
K3NTSWpPZUNNN1pIWEIzcEs4c0U2OTVCOWE5TmcK1nj86cobbkI5DlqXOe8wkSEd VVZ5dHYwN1o0UG8yN0JEL1NnMFdTQzNVdjQ5WDQKRPkajSZwrQHbsf4zN1cCQGyC
WKeQHsEq6I5zIxRAa/AKAq+onz0DQa9ndT3IGg+LxisdahoxM+TpWoeZjJ3YndcH y/G6HPLlynpV/OmTuln1uRlNevn7u9pY2eO7ZdtEwH39PSzDKBUmHHTUU0ut+5oL
BIzluYikuEsNZ5A0C7RzZWk54wOiJVLf9RLbylwL6+tmq9OlIv/JFcw0kKD0Bcre 0YGJUJlqfGj5IbtoKtYzO276Khwsk0fCcH2rp+2armXeq2EPF5/JeWffZuQ63Xrl
8W9acC8xHvimpoS9lmmRBBRVPNwc04Ms9V4MYZuLZ16EfzK+07rOGn7cH7TCmjGs b3lBaIQvMv/e5R6uyR+Upr+Bf3eBUGNvy/Uo7OQqWdkoNaikUT5/7iVwFYrPZ21U
X9/iZL02RbFTssX/61P8xbRem04CwZvYuHcOsezk1p0wxUNIHwAzV07TXzIKa3NS Azh2RM70jyUlxPlm37JYObHSBqCEJH8mB0hU/3PdvAY39l2Wb6YJkZV2MPi6Yb17
aXL0jdoVIbNm9C9SN84PA+7ApIn1CMnQcbMFmAbS/pwO901K2v3VOwfE5wipMtVl nsKWslxxKUBc1ExBA+2iYL7R+vtwxxvztqHjdOgrbrR8in163qp9rIGpOSwHmIJL
dPo= T2K+B0IU1aYE4z7Ee1guppyztv80ktyWgQHkeKi0G3hHAS+AeHPaYphDtKsytg==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----

5
systems/etna/default.nix
View file

@ -8,10 +8,7 @@ let
tunnelId = "57f51ad7-25a0-45f3-b113-0b6ae0b2c3e5"; tunnelId = "57f51ad7-25a0-45f3-b113-0b6ae0b2c3e5";
secrets = _utils.setupSharedSecrets config { secrets = [ "frpToken" ]; }; secrets = _utils.setupSharedSecrets config { secrets = [ "frpToken" ]; };
cfTunnelSecret = _utils.setupSingleSecret config "tunnelCreds" { cfTunnelSecret = _utils.setupSingleSecret config "tunnelCreds" { };
owner = "cloudflared";
group = "cloudflared";
};
in in
{ {
assertions = [ assertions = [