set secret owner

This commit is contained in:
Kiara Grouwstra 2025-03-18 17:40:11 +01:00
parent 8eb87c1cfc
commit 78d845d05d
Signed by: kiara
SSH key fingerprint: SHA256:COspvLoLJ5WC5rFb9ZDe5urVCkK4LJZOsjfF4duRJFU

View file

@ -1,5 +1,4 @@
{ {
# inputs,
config, config,
pkgs, pkgs,
... ...
@ -8,7 +7,6 @@ let
name = "panel"; name = "panel";
panel = (import ../../../panel/default.nix { }).package; panel = (import ../../../panel/default.nix { }).package;
in in
# builtins.trace args.pkgs
{ {
imports = [ imports = [
../../../panel/nix/configuration.nix ../../../panel/nix/configuration.nix
@ -24,6 +22,11 @@ in
panel panel
]; ];
age.secrets.panel-secret-key = {
owner = name;
group = name;
};
security.acme = { security.acme = {
acceptTerms = true; acceptTerms = true;
defaults.email = "beheer@procolix.com"; defaults.email = "beheer@procolix.com";
@ -41,7 +44,7 @@ in
port = 8000; port = 8000;
settings = { settings = {
DATABASE_URL = "sqlite:///var/lib/${name}/db.sqlite3"; DATABASE_URL = "sqlite:///var/lib/${name}/db.sqlite3";
CREDENTIALS_DIRECTORY = "/var/lib/${name}/.credentials"; STATIC_ROOT = "/var/lib/${name}/static";
}; };
}; };
systemd.services.${name}.environment = { systemd.services.${name}.environment = {