forked from Fachschaft/nixConfig
renamed secret files so they are easier to shell glob
This commit is contained in:
parent
e5e3fab14d
commit
064aca1705
12 changed files with 9 additions and 9 deletions
|
@ -14,7 +14,7 @@
|
|||
system.stateVersion = "23.11";
|
||||
|
||||
sops.secrets.backupKey = {
|
||||
sopsFile = ./backupKey.yaml;
|
||||
sopsFile = ./backupKey.secrets.yaml;
|
||||
owner = config.users.users.fsaccount.name;
|
||||
inherit (config.users.users.fsaccount) group;
|
||||
mode = "0400";
|
||||
|
|
|
@ -21,13 +21,13 @@
|
|||
|
||||
sops.secrets = {
|
||||
allowlistPass = {
|
||||
sopsFile = ./allowlistPass.yaml;
|
||||
sopsFile = ./allowlistPass.secrets.yaml;
|
||||
owner = "mailman";
|
||||
group = "mailman";
|
||||
mode = "0400";
|
||||
};
|
||||
backupKey = {
|
||||
sopsFile = ./backupKey.yaml;
|
||||
sopsFile = ./backupKey.secrets.yaml;
|
||||
owner = "root";
|
||||
group = "root";
|
||||
mode = "0400";
|
||||
|
|
|
@ -43,7 +43,7 @@
|
|||
|
||||
sops.secrets = let
|
||||
allowlistSops = {
|
||||
sopsFile = ./allowlistPass.yaml;
|
||||
sopsFile = ./allowlistPass.secrets.yaml;
|
||||
owner = "stalwart-mail";
|
||||
group = "stalwart-mail";
|
||||
mode = "0400";
|
||||
|
@ -56,32 +56,32 @@
|
|||
"allowlistPass/koma" = allowlistSops;
|
||||
# Virtual alias file
|
||||
"mathebau.aliases" = {
|
||||
sopsFile = ./mathebau.aliases.yaml;
|
||||
sopsFile = ./mathebau.aliases.secrets.yaml;
|
||||
owner = "stalwart-mail";
|
||||
group = "stalwart-mail";
|
||||
mode = "0440";
|
||||
};
|
||||
"mathechor.aliases" = {
|
||||
sopsFile = ./mathechor.aliases.yaml;
|
||||
sopsFile = ./mathechor.aliases.secrets.yaml;
|
||||
owner = "stalwart-mail";
|
||||
group = "stalwart-mail";
|
||||
mode = "0440";
|
||||
};
|
||||
"koma.aliases" = {
|
||||
sopsFile = ./koma.aliases.yaml;
|
||||
sopsFile = ./koma.aliases.secrets.yaml;
|
||||
owner = "stalwart-mail";
|
||||
group = "stalwart-mail";
|
||||
mode = "0440";
|
||||
};
|
||||
# password for https://stalw.art/docs/auth/authorization/administrator/#fallback-administrator encoded to be supplied in the basic auth header
|
||||
stalwartAdmin = {
|
||||
sopsFile = ./stalwartAdmin.yaml;
|
||||
sopsFile = ./stalwartAdmin.secrets.yaml;
|
||||
owner = "stalwart-mail";
|
||||
group = "stalwart-mail";
|
||||
mode = "0400";
|
||||
};
|
||||
backupKey = {
|
||||
sopsFile = ./backupKey.yaml;
|
||||
sopsFile = ./backupKey.secrets.yaml;
|
||||
owner = "root";
|
||||
group = "root";
|
||||
mode = "0400";
|
||||
|
|
Loading…
Add table
Reference in a new issue