nydragon/nix-da
1
Fork 0
Code Issues Pull requests Activity Actions 1

feat: add navidrome secret key

Browse source
This commit is contained in:
Nydragon 2024-10-01 20:02:31 +02:00
parent 5ed82281d8
commit 6d6009a4e9
Signed by: nydragon
SSH key fingerprint: SHA256:iQnIC12spf4QjWSbarmkD2No1cLMlu6TWoV7K6cYF5g
5 changed files with 13 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
flake.lock generated
View file

@ -455,11 +455,11 @@
"quickshell": "quickshell" "quickshell": "quickshell"
}, },
"locked": { "locked": {
"lastModified": 1727486385, "lastModified": 1727571386,
"narHash": "sha256-+zKlAyVmmHkvdN5VpOAv7U5/SWY4JR/ZJjUscjHRLc0=", "narHash": "sha256-bk34Wr2VjFb+3CFATI3zzCkRa2wtDxFFgkMkNhRx5GI=",
"ref": "refs/heads/main", "ref": "refs/heads/main",
"rev": "6cd1de8984c7544b4c43b88c9aa4ca61fde1f229", "rev": "5309cf0de60bbcf2be5d75ccb2fc31d499525daa",
"revCount": 49, "revCount": 53,
"type": "git", "type": "git",
"url": "https://codeberg.org/nydragon/nysh" "url": "https://codeberg.org/nydragon/nysh"
}, },

3
flake.nix
View file

@ -58,7 +58,7 @@
]; ];
perSystem = perSystem =
{ pkgs, ... }: { pkgs, inputs', ... }:
{ {
formatter = pkgs.nixfmt-rfc-style; formatter = pkgs.nixfmt-rfc-style;
devShells.default = pkgs.mkShell { devShells.default = pkgs.mkShell {
@ -67,6 +67,7 @@
nixfmt-rfc-style nixfmt-rfc-style
nodePackages.prettier nodePackages.prettier
typos typos
inputs'.agenix.packages.default
]; ];
shellHook = '' shellHook = ''
${pkgs.pre-commit}/bin/pre-commit install -f ${pkgs.pre-commit}/bin/pre-commit install -f

4
options/navidrome.nix
View file

@ -62,5 +62,9 @@ in
MusicFolder = cfg.library.path; MusicFolder = cfg.library.path;
} // cfg.settings; } // cfg.settings;
}; };
systemd.services.navidrome.serviceConfig = {
EnvironmentFile = config.age.secrets.navidrome.path;
};
}; };
} }

BIN
secrets/navidrome.age Normal file
View file

Binary file not shown.

4
secrets/secrets.nix
View file

@ -2,14 +2,16 @@ let
raptus = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKdpjGR/pV1roktZdKIVVWqds0JB+x1ksfyQmYPMLK7o"; raptus = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKdpjGR/pV1roktZdKIVVWqds0JB+x1ksfyQmYPMLK7o";
marr = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILMh2nUUKt3xsKiwZUuo6HgvR3lr7rRAl0SOH/502sFP"; marr = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILMh2nUUKt3xsKiwZUuo6HgvR3lr7rRAl0SOH/502sFP";
brontes = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICgknH3OPazZNhH5xkYfXBcYpI3TXj/eRp0/zzjtVJBf"; brontes = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICgknH3OPazZNhH5xkYfXBcYpI3TXj/eRp0/zzjtVJBf";
shan = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPnASO1+h9tUYsNrsePcmxFLpKBkyCXbcZB9W7f5Yt5U";
devices = [ devices = [
marr marr
raptus raptus
brontes brontes
shan
]; ];
in in
{ {
"couchdb.age".publicKeys = devices; "couchdb.age".publicKeys = devices;
"rustypaste.age".publicKeys = devices; "rustypaste.age".publicKeys = devices;
"navidrome.age".publicKeys = devices;
} }