secrets...!

2025-03-17 20:05:57 -06:00
parent 5672d130ff
commit 795a91d00b
1 changed files with 5 additions and 0 deletions
--- a/modules/servers/synapse.nix
+++ b/modules/servers/synapse.nix
@@ -20,6 +20,11 @@ in
        owner = "matrix-synapse";
        group = "matrix-synapse";
      };
+      "iqQCY4iAWO-ca/pem" = {
+        sopsFile = ../../secrets/certs.yaml;
+        owner = "nginx";
+        group = "nginx";
+      };
    };
    networking.firewall.allowedTCPPorts = lib.mkIf (!cfg.isLocal) [ cfg.port ];
    services = lib.mkIf cfg.enable {