38 lines
1.4 KiB
Nix
38 lines
1.4 KiB
Nix
|
{ ... }:
|
||
|
|
{
|
||
|
|
deployment.keys = {
|
||
|
|
"mastodon-secret-key-base.secret" = {
|
||
|
|
keyCommand = [ "env" "GNUPGHOME=/home/yuri/.passinfra_gnupg" "PASSWORD_STORE_DIR=/home/yuri/pass/infra" "pass" "mastodon/secret-key-base" ];
|
||
|
|
destDir = "/secrets";
|
||
|
|
user = "mastodon";
|
||
|
|
group = "mastodon";
|
||
|
|
permissions = "0640";
|
||
|
|
uploadAt = "pre-activation";
|
||
|
|
};
|
||
|
|
"mastodon-otp-secret.secret" = {
|
||
|
|
keyCommand = [ "env" "GNUPGHOME=/home/yuri/.passinfra_gnupg" "PASSWORD_STORE_DIR=/home/yuri/pass/infra" "pass" "mastodon/otp-secret" ];
|
||
|
|
destDir = "/secrets";
|
||
|
|
user = "mastodon";
|
||
|
|
group = "mastodon";
|
||
|
|
permissions = "0640";
|
||
|
|
uploadAt = "pre-activation";
|
||
|
|
};
|
||
|
|
"mastodon-vapid-private-key.secret" = {
|
||
|
|
keyCommand = [ "env" "GNUPGHOME=/home/yuri/.passinfra_gnupg" "PASSWORD_STORE_DIR=/home/yuri/pass/infra" "pass" "mastodon/vapid-private-key" ];
|
||
|
|
destDir = "/secrets";
|
||
|
|
user = "mastodon";
|
||
|
|
group = "mastodon";
|
||
|
|
permissions = "0640";
|
||
|
|
uploadAt = "pre-activation";
|
||
|
|
};
|
||
|
|
"mastodon-email-smtp-pass.secret" = {
|
||
|
|
keyCommand = [ "env" "GNUPGHOME=/home/yuri/.passinfra_gnupg" "PASSWORD_STORE_DIR=/home/yuri/pass/infra" "pass" "mastodon/email-smtp-pass" ];
|
||
|
|
destDir = "/secrets";
|
||
|
|
user = "mastodon";
|
||
|
|
group = "mastodon";
|
||
|
|
permissions = "0640";
|
||
|
|
uploadAt = "pre-activation";
|
||
|
|
};
|
||
|
|
};
|
||
|
|
}
|