renamed secret files so they are easier to shell glob #60

Merged
Gonne merged 1 commit from nerf/nixConfig:main into main 2025-03-06 07:49:54 +00:00
12 changed files with 9 additions and 9 deletions

View file

@ -14,7 +14,7 @@
system.stateVersion = "23.11"; system.stateVersion = "23.11";
sops.secrets.backupKey = { sops.secrets.backupKey = {
sopsFile = ./backupKey.yaml; sopsFile = ./backupKey.secrets.yaml;
owner = config.users.users.fsaccount.name; owner = config.users.users.fsaccount.name;
inherit (config.users.users.fsaccount) group; inherit (config.users.users.fsaccount) group;
mode = "0400"; mode = "0400";

View file

@ -21,13 +21,13 @@
sops.secrets = { sops.secrets = {
allowlistPass = { allowlistPass = {
sopsFile = ./allowlistPass.yaml; sopsFile = ./allowlistPass.secrets.yaml;
owner = "mailman"; owner = "mailman";
group = "mailman"; group = "mailman";
mode = "0400"; mode = "0400";
}; };
backupKey = { backupKey = {
sopsFile = ./backupKey.yaml; sopsFile = ./backupKey.secrets.yaml;
owner = "root"; owner = "root";
group = "root"; group = "root";
mode = "0400"; mode = "0400";

View file

@ -43,7 +43,7 @@
sops.secrets = let sops.secrets = let
allowlistSops = { allowlistSops = {
sopsFile = ./allowlistPass.yaml; sopsFile = ./allowlistPass.secrets.yaml;
owner = "stalwart-mail"; owner = "stalwart-mail";
group = "stalwart-mail"; group = "stalwart-mail";
mode = "0400"; mode = "0400";
@ -56,32 +56,32 @@
"allowlistPass/koma" = allowlistSops; "allowlistPass/koma" = allowlistSops;
# Virtual alias file # Virtual alias file
"mathebau.aliases" = { "mathebau.aliases" = {
sopsFile = ./mathebau.aliases.yaml; sopsFile = ./mathebau.aliases.secrets.yaml;
owner = "stalwart-mail"; owner = "stalwart-mail";
group = "stalwart-mail"; group = "stalwart-mail";
mode = "0440"; mode = "0440";
}; };
"mathechor.aliases" = { "mathechor.aliases" = {
sopsFile = ./mathechor.aliases.yaml; sopsFile = ./mathechor.aliases.secrets.yaml;
owner = "stalwart-mail"; owner = "stalwart-mail";
group = "stalwart-mail"; group = "stalwart-mail";
mode = "0440"; mode = "0440";
}; };
"koma.aliases" = { "koma.aliases" = {
sopsFile = ./koma.aliases.yaml; sopsFile = ./koma.aliases.secrets.yaml;
owner = "stalwart-mail"; owner = "stalwart-mail";
group = "stalwart-mail"; group = "stalwart-mail";
mode = "0440"; mode = "0440";
}; };
# password for https://stalw.art/docs/auth/authorization/administrator/#fallback-administrator encoded to be supplied in the basic auth header # password for https://stalw.art/docs/auth/authorization/administrator/#fallback-administrator encoded to be supplied in the basic auth header
stalwartAdmin = { stalwartAdmin = {
sopsFile = ./stalwartAdmin.yaml; sopsFile = ./stalwartAdmin.secrets.yaml;
owner = "stalwart-mail"; owner = "stalwart-mail";
group = "stalwart-mail"; group = "stalwart-mail";
mode = "0400"; mode = "0400";
}; };
backupKey = { backupKey = {
sopsFile = ./backupKey.yaml; sopsFile = ./backupKey.secrets.yaml;
owner = "root"; owner = "root";
group = "root"; group = "root";
mode = "0400"; mode = "0400";