added secureHost flag

2025-09-28 10:52:27 -06:00
parent d704e0ee13
commit a376428118
24 changed files with 100 additions and 87 deletions
--- a/modules/servers/stash.nix
+++ b/modules/servers/stash.nix
@@ -5,13 +5,13 @@ let
 in
 {
  options.my.servers.stash = setup.mkOptions "stash" "xxx" 9999;
-  config = {
-    sops.secrets = lib.mkIf cfg.enable {
+  config = lib.mkIf (cfg.enable && config.my.secureHost) {
+    sops.secrets = {
      "stash/password".sopsFile = ../../secrets/env.yaml;
      "stash/jwt".sopsFile = ../../secrets/env.yaml;
      "stash/session".sopsFile = ../../secrets/env.yaml;
    };
-    services.stash = lib.mkIf cfg.enable {
+    services.stash = {
      enable = true;
      group = "piracy";
      mutableSettings = true;