secrets...!

This commit is contained in:
Danilo Reyes 2025-03-17 20:05:57 -06:00
parent 5672d130ff
commit 795a91d00b

View File

@ -20,6 +20,11 @@ in
owner = "matrix-synapse"; owner = "matrix-synapse";
group = "matrix-synapse"; group = "matrix-synapse";
}; };
"iqQCY4iAWO-ca/pem" = {
sopsFile = ../../secrets/certs.yaml;
owner = "nginx";
group = "nginx";
};
}; };
networking.firewall.allowedTCPPorts = lib.mkIf (!cfg.isLocal) [ cfg.port ]; networking.firewall.allowedTCPPorts = lib.mkIf (!cfg.isLocal) [ cfg.port ];
services = lib.mkIf cfg.enable { services = lib.mkIf cfg.enable {