bgt/savarcast: update secrets
This commit is contained in:
parent
c41d77ec51
commit
1aaabf73a4
2configs/bgt/savarcast
|
@ -1,9 +1,9 @@
|
|||
{ config, pkgs, lib, ... }:
|
||||
let
|
||||
configFile = config.sops.secrets."isso.conf".path;
|
||||
configFile = config.sops.secrets."bgt-isso.conf".path;
|
||||
in {
|
||||
|
||||
sops.secrets."isso.conf" = {
|
||||
sops.secrets."bgt-isso.conf" = {
|
||||
owner = "isso";
|
||||
group = "isso";
|
||||
};
|
||||
|
|
|
@ -2,7 +2,6 @@
|
|||
let
|
||||
searchdir = "/var/www/search";
|
||||
in {
|
||||
|
||||
users.users.stork = {
|
||||
group = "stork";
|
||||
isNormalUser = true;
|
||||
|
@ -13,6 +12,7 @@ in {
|
|||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGrj6cLVxv6LR0INj2OL/EVdEFMZSk0fOc0pCeXVTirz hi@l33t.name"
|
||||
];
|
||||
};
|
||||
users.groups.stork = {};
|
||||
|
||||
systemd.tmpfiles.rules = [ "d ${searchdir} 0770 stork nginx - -" ];
|
||||
|
||||
|
|
Loading…
Reference in a new issue