alexandre
/
nixos-config
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Merge branch 'main' of git.atlanticaweb.fr:alexandre/nixos-config

This commit is contained in:
Alexandre LUCAZEAU 2022-08-26 08:32:55 +02:00
parent f951f73c3e 7628e65db6
commit fcaf049c1f
4 changed files with 22 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
hosts/next/agenix.nix
View File

@ -20,5 +20,9 @@
owner = "nextcloud"; owner = "nextcloud";
group = "nextcloud"; group = "nextcloud";
}; };
age.secrets.secret_pgadmin = {
file = ./secrets/pgadmin.age;
path = "/run/pgadmin";
};
} }

9
hosts/next/databases.nix
View File

@ -1,10 +1,11 @@
{config, pkgs, ...}: {config, pkgs, ...}:
{ {
networking.firewall.allowedTCPPorts = [ 5432 ]; networking.firewall.allowedTCPPorts = [ 5432 5050 ];
# Enable PostgreSQL # Enable PostgreSQL
services.postgresql = { services.postgresql = {
enable = true; enable = true;
enableTCPIP = true;
authentication = "host all all 192.168.0.0/16 trust"; authentication = "host all all 192.168.0.0/16 trust";
# Ensure the database, user, and permissions always exist # Ensure the database, user, and permissions always exist
@ -15,5 +16,11 @@ networking.firewall.allowedTCPPorts = [ 5432 ];
} }
]; ];
}; };
services.pgadmin = {
openFirewall = true;
enable = true;
initialEmail = "pizzajoffre@gmail.com";
initialPasswordFile = /run/pgadmin;
};
} }

7
hosts/next/secrets/pgadmin.age Normal file
View File

@ -0,0 +1,7 @@
age-encryption.org/v1
-> ssh-ed25519 AsRWPA vJ7KcVXhCCcq0Mk4aBaM5LoA9gF6WOdDzTChwbkelkM
YdTT5zQt6gQobb50qs6nCXokOqW7+ZM5trmp6ld034M
-> (GBiT\-grease (e <?VOv
cEKrUoJR
--- EDtW17elIqlxfU+8oIWtEGKdQ1DS1ANNAbC96WAPt3s
½6Þ‰ö³açk_ŽOÄô¯`<60>öÝ+ ò /ó°ÑÚÏI‘¿ô§&ÒË

3
hosts/next/secrets/secrets.nix
View File

@ -1,12 +1,15 @@
let let
nextcloud-db = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGgO3EpoG14fn0VYC69sSS0iI5ZEB4qx9adFS+L5U5ZB"; nextcloud-db = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGgO3EpoG14fn0VYC69sSS0iI5ZEB4qx9adFS+L5U5ZB";
nextcloud-admin = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGgO3EpoG14fn0VYC69sSS0iI5ZEB4qx9adFS+L5U5ZB"; nextcloud-admin = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGgO3EpoG14fn0VYC69sSS0iI5ZEB4qx9adFS+L5U5ZB";
pgadmin = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGgO3EpoG14fn0VYC69sSS0iI5ZEB4qx9adFS+L5U5ZB";
restic = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGgO3EpoG14fn0VYC69sSS0iI5ZEB4qx9adFS+L5U5ZB"; restic = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGgO3EpoG14fn0VYC69sSS0iI5ZEB4qx9adFS+L5U5ZB";
users_nextcloud = [ nextcloud-db nextcloud-admin ]; users_nextcloud = [ nextcloud-db nextcloud-admin ];
users_backup = [ restic ]; users_backup = [ restic ];
users_postgresl = [ pgadmin ];
in in
{ {
"nextcloud-db-pass.age".publicKeys = users_nextcloud; "nextcloud-db-pass.age".publicKeys = users_nextcloud;
"nextcloud-admin-pass.age".publicKeys = users_nextcloud; "nextcloud-admin-pass.age".publicKeys = users_nextcloud;
"secret_restic.age".publicKeys = users_backup; "secret_restic.age".publicKeys = users_backup;
"pgadmin.age".publicKeys = users_postgresl;
} }