mirror of
https://forge.katzen.cafe/katzen-cafe/katzen-cafe.git
synced 2024-11-24 06:48:44 +01:00
vault
This commit is contained in:
parent
928f970d55
commit
ad663f501e
|
@ -15,7 +15,8 @@
|
|||
hostPkgs = import nixpkgs { system = "x86_64-linux"; };
|
||||
in {
|
||||
devShell."x86_64-linux" = with hostPkgs; mkShell {
|
||||
buildInputs = [ colmena ];
|
||||
buildInputs = [ colmena vault ];
|
||||
VAULT_ADDR = "https://hc-vault.katzen.cafe";
|
||||
};
|
||||
colmena = {
|
||||
meta = {
|
||||
|
@ -50,6 +51,7 @@
|
|||
./modules/mumble.nix
|
||||
./modules/modded-mc.nix
|
||||
#./modules/prosody.nix
|
||||
./modules/vault.nix
|
||||
];
|
||||
|
||||
system.stateVersion = "22.11";
|
||||
|
|
|
@ -35,6 +35,10 @@
|
|||
group = "murmur";
|
||||
keyType = "rsa4096";
|
||||
};
|
||||
"hc-vault.katzen.cafe" = {
|
||||
group = "nginx";
|
||||
keyType = "rsa4096";
|
||||
};
|
||||
# "prosody.katzen.cafe" = {
|
||||
# group = "prosody";
|
||||
# keyType = "rsa4096";
|
||||
|
@ -110,6 +114,13 @@
|
|||
proxyPass = "http://127.0.0.2:8081";
|
||||
};
|
||||
};
|
||||
"hc-vault.katzen.cafe" = {
|
||||
forceSSL = true;
|
||||
enableACME = true;
|
||||
locations."/" = {
|
||||
proxyPass = "http://127.0.0.1:8200";
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
}
|
||||
|
|
11
modules/vault.nix
Normal file
11
modules/vault.nix
Normal file
|
@ -0,0 +1,11 @@
|
|||
{ pkgs, ... }:
|
||||
{
|
||||
services.vault = {
|
||||
enable = true;
|
||||
package = pkgs.vault-bin;
|
||||
storageBackend = "file";
|
||||
extraConfig = ''
|
||||
ui = true
|
||||
'';
|
||||
};
|
||||
}
|
Loading…
Reference in a new issue