bendodroid/nix-infra
0
0
Fork 0
forked from CCCHH/nix-infra
Code Pull requests Activity

Switch the netbox hosts secret management from colmena to sops-nix

Browse source
This commit is contained in:
June 2024-05-26 03:14:31 +02:00
commit dc439abefe
Signed by: june
SSH key fingerprint: SHA256:o9EAq4Y9N9K0pBQeBTqhSDrND5E7oB+60ZNx0U1yPe0
6 changed files with 264 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

14
config/hosts/netbox/netbox.nix
View file

@ -10,21 +10,17 @@
services.netbox = {
enable = true;
package = pkgs.netbox;
secretKeyFile = "/secrets/netbox-secret-key.secret";
secretKeyFile = "/run/secrets/netbox_secret_key";
settings = {
ALLOWED_HOSTS = [ "netbox.hamburg.ccc.de" ];
SESSION_COOKIE_SECURE = true;
};
};
deployment.keys."netbox-secret-key.secret" = {
keyCommand = [ "env" "pass" "noc/vm-secrets/z9/netbox/netbox_secret_key" ];
destDir = "/secrets";
user = "netbox";
sops.secrets."netbox_secret_key" = {
mode = "0440";
owner = "netbox";
group = "netbox";
permissions = "0440";
uploadAt = "pre-activation";
restartUnits = [ "netbox.service" ];
};
}