33 lines
978 B
Nix
33 lines
978 B
Nix
{...}: {
|
|
services.secrets = {
|
|
enable = true;
|
|
secrets = {
|
|
usb_encryption_passphrase = {
|
|
manual = true;
|
|
};
|
|
|
|
music_stream_password = {
|
|
user = "chaos";
|
|
group = "users";
|
|
fetchScript = ''
|
|
simple_get "/api-keys/music-stream" .password > "$secretFile"
|
|
'';
|
|
};
|
|
|
|
# Required for home.apps.manualBackupApps
|
|
restic_music_env = {
|
|
user = "chaos";
|
|
fetchScript = ''
|
|
api_username=$(simple_get "/api-keys/storage/restic/Music" .username)
|
|
api_password=$(simple_get "/api-keys/storage/restic/Music" .password)
|
|
restic_password=$(simple_get "/private-public-keys/restic/Music" .password)
|
|
|
|
echo > "$secretFile"
|
|
echo "RESTIC_REPOSITORY=rest:https://''${api_username}:''${api_password}@storage-restic.owo.monster/Music" >> "$secretFile"
|
|
echo "RESTIC_PASSWORD=''${restic_password}" >> "$secretFile"
|
|
'';
|
|
};
|
|
};
|
|
};
|
|
}
|