chore(package): gitea: verify heatmap package build
This commit is contained in:
@@ -9,11 +9,11 @@ with self.lib;
|
||||
let
|
||||
# Combine hectic modules into one
|
||||
hectic.imports = attrValues (
|
||||
readModulesRecursive' ./hectic { inherit flake self inputs; }
|
||||
readModulesRecursive' (flake + "/nixos/module/hectic") { inherit flake self inputs; }
|
||||
);
|
||||
# Read generic modules separately
|
||||
generic = readModulesRecursive'
|
||||
./generic
|
||||
(flake + "/nixos/module/generic")
|
||||
{ inherit flake self inputs; };
|
||||
in generic // {
|
||||
inherit hectic;
|
||||
|
||||
@@ -18,6 +18,7 @@
|
||||
];
|
||||
|
||||
adminNames = [ "yukkop" ];
|
||||
matrixClusterSopsFile = flake + "/sus/matrix-cluster.yaml";
|
||||
|
||||
cfg = config.hectic.generic.matrix-cluster;
|
||||
in {
|
||||
@@ -39,7 +40,7 @@ in {
|
||||
value = {
|
||||
key = "matrix/users/${name}/password";
|
||||
owner = "matrix-synapse";
|
||||
sopsFile = "${flake}/sus/matrix-cluster.yaml";
|
||||
sopsFile = matrixClusterSopsFile;
|
||||
};
|
||||
}) userNames
|
||||
);
|
||||
|
||||
@@ -147,7 +147,7 @@ in {
|
||||
|
||||
(lib.mkIf cfg.watcher.enable {
|
||||
sops.secrets."sentinèlla/watcher/environment" = lib.mkDefault {
|
||||
sopsFile = "${flake}/sus/sentinella-default.yaml";
|
||||
sopsFile = flake + "/sus/sentinella-default.yaml";
|
||||
};
|
||||
|
||||
systemd.services."sentinella-watcher" = {
|
||||
|
||||
@@ -14,6 +14,7 @@
|
||||
jitsiHost = "meet.accord.tube";
|
||||
elementEntryDomain = "element.bfs.band";
|
||||
polandEntryDomain = "bfs.band";
|
||||
matrixClusterSopsFile = flake + "/sus/matrix-cluster.yaml";
|
||||
backendProxyConfig = ''
|
||||
proxy_ssl_server_name on;
|
||||
proxy_ssl_name ${matrixHost};
|
||||
@@ -203,41 +204,41 @@ in {
|
||||
key = "matrix/signing-key";
|
||||
owner = "matrix-synapse";
|
||||
mode = "0400";
|
||||
sopsFile = "${flake}/sus/matrix-cluster.yaml";
|
||||
sopsFile = matrixClusterSopsFile;
|
||||
};
|
||||
sops.secrets."matrix/postgres-replication-password" = {
|
||||
key = "matrix/postgres-replication-password";
|
||||
owner = "postgres";
|
||||
mode = "0400";
|
||||
sopsFile = "${flake}/sus/matrix-cluster.yaml";
|
||||
sopsFile = matrixClusterSopsFile;
|
||||
};
|
||||
sops.secrets."matrix/object-storage/credentials" = {
|
||||
key = "matrix/object-storage/credentials";
|
||||
owner = "matrix-synapse";
|
||||
mode = "0400";
|
||||
sopsFile = "${flake}/sus/matrix-cluster.yaml";
|
||||
sopsFile = matrixClusterSopsFile;
|
||||
};
|
||||
sops.secrets."matrix/secrets" = {
|
||||
key = "matrix/secrets";
|
||||
owner = "matrix-synapse";
|
||||
mode = "0400";
|
||||
sopsFile = "${flake}/sus/matrix-cluster.yaml";
|
||||
sopsFile = matrixClusterSopsFile;
|
||||
};
|
||||
sops.secrets."matrix/turn-secret" = {
|
||||
key = "matrix/turn-secret";
|
||||
owner = "turnserver";
|
||||
group = "turnserver";
|
||||
mode = "0400";
|
||||
sopsFile = "${flake}/sus/matrix-cluster.yaml";
|
||||
sopsFile = matrixClusterSopsFile;
|
||||
};
|
||||
sops.secrets."matrix/porkbun-api-key" = {
|
||||
key = "matrix/porkbun-api-key";
|
||||
mode = "0400";
|
||||
sopsFile = "${flake}/sus/matrix-cluster.yaml";
|
||||
sopsFile = matrixClusterSopsFile;
|
||||
};
|
||||
sops.secrets."matrix/porkbun-secret-api-key" = {
|
||||
key = "matrix/porkbun-secret-api-key";
|
||||
mode = "0400";
|
||||
sopsFile = "${flake}/sus/matrix-cluster.yaml";
|
||||
sopsFile = matrixClusterSopsFile;
|
||||
};
|
||||
}
|
||||
|
||||
@@ -116,7 +116,7 @@ in {
|
||||
sops = {
|
||||
gnupg.sshKeyPaths = [ ];
|
||||
age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
|
||||
defaultSopsFile = "${flake}/sus/hectic-lab.yaml";
|
||||
defaultSopsFile = flake + "/sus/hectic-lab.yaml";
|
||||
secrets = builtins.listToAttrs (map mkMailPasswordSecret mailUserNames) // {
|
||||
"init-postgresql" = {
|
||||
key = "init-postgresql";
|
||||
|
||||
Reference in New Issue
Block a user