30 lines
834 B
Nix
30 lines
834 B
Nix
|
# Sources for this configuration:
|
||
|
|
# - https://docs.netbox.dev/en/stable/configuration/
|
||
|
|
# - https://colmena.cli.rs/unstable/features/keys.html
|
||
|
|
# - https://colmena.cli.rs/unstable/reference/deployment.html
|
||
|
|
# - https://git.grzb.de/yuri/nix-infra/-/blob/33f2d9e324c2e3a8b1b41c20bce239001bcce9fc/hosts/netbox/secrets.nix
|
||
|
|
|
||
|
|
{ config, pkgs, ... }:
|
||
|
|
|
||
|
|
{
|
||
|
|
services.netbox = {
|
||
|
|
enable = true;
|
||
|
|
secretKeyFile = "/secrets/netbox-secret-key.secret";
|
||
|
|
settings = {
|
||
|
|
ALLOWED_HOSTS = [ "netbox.ccchh.net" "10.31.208.29" ];
|
||
|
|
SESSION_COOKIE_SECURE = true;
|
||
|
|
};
|
||
|
|
};
|
||
|
|
|
||
|
|
deployment.keys."netbox-secret-key.secret" = {
|
||
|
|
keyCommand = [ "env" "pass" "noc/vm-secrets/z9/netbox/netbox_secret_key" ];
|
||
|
|
|
||
|
|
destDir = "/secrets";
|
||
|
|
user = "netbox";
|
||
|
|
group = "netbox";
|
||
|
|
permissions = "0440";
|
||
|
|
|
||
|
|
uploadAt = "pre-activation";
|
||
|
|
};
|
||
|
|
}
|