61 lines
2 KiB
Nix
61 lines
2 KiB
Nix
{ keyCommandEnv, ... }:
|
|
{
|
|
deployment.keys = {
|
|
"matrix-registration-shared-secret.secret" = {
|
|
keyCommand = keyCommandEnv ++ [ "pass" "matrix/registration-shared-secret" ];
|
|
destDir = "/secrets";
|
|
user = "matrix-synapse";
|
|
group = "matrix-synapse";
|
|
permissions = "0640";
|
|
uploadAt = "pre-activation";
|
|
};
|
|
"matrix-turn-shared-secret.secret" = {
|
|
keyCommand = keyCommandEnv ++ [ "pass" "matrix/turn-shared-secret" ];
|
|
destDir = "/secrets";
|
|
user = "matrix-synapse";
|
|
group = "matrix-synapse";
|
|
permissions = "0640";
|
|
uploadAt = "pre-activation";
|
|
};
|
|
"matrix-email-smtp-pass.secret" = {
|
|
keyCommand = keyCommandEnv ++ [ "pass" "matrix/email-smtp-pass" ];
|
|
destDir = "/secrets";
|
|
user = "matrix-synapse";
|
|
group = "matrix-synapse";
|
|
permissions = "0640";
|
|
uploadAt = "pre-activation";
|
|
};
|
|
"matrix-homeserver-signing-key.secret" = {
|
|
keyCommand = keyCommandEnv ++ [ "pass" "matrix/homeserver-signing-key" ];
|
|
destDir = "/secrets";
|
|
user = "matrix-synapse";
|
|
group = "matrix-synapse";
|
|
permissions = "0640";
|
|
uploadAt = "pre-activation";
|
|
};
|
|
"matrix-homeserver-mas-config.secret" = {
|
|
keyCommand = keyCommandEnv ++ [ "pass" "matrix/homeserver-mas-config" ];
|
|
destDir = "/secrets";
|
|
user = "matrix-synapse";
|
|
group = "matrix-synapse";
|
|
permissions = "0640";
|
|
uploadAt = "pre-activation";
|
|
};
|
|
"matrix-mas-secret-config.secret" = {
|
|
keyCommand = keyCommandEnv ++ [ "pass" "matrix/mas-secret-config" ];
|
|
destDir = "/secrets";
|
|
user = "matrix-synapse";
|
|
group = "matrix-synapse";
|
|
permissions = "0640";
|
|
uploadAt = "pre-activation";
|
|
};
|
|
"matrix-livekit-secret-key.secret" = {
|
|
keyCommand = keyCommandEnv ++ [ "pass" "matrix/livekit-secret-key" ];
|
|
destDir = "/secrets";
|
|
user = "root";
|
|
group = "root";
|
|
permissions = "0640";
|
|
uploadAt = "pre-activation";
|
|
};
|
|
};
|
|
}
|