prescientmoon/satellite
1
Fork 0
Code Activity

Write hmac key to json-like file

Browse source
This commit is contained in:
prescientmoon 2024-03-11 16:30:04 +01:00
parent aa89185312
commit aa0da11a07
Signed by: prescientmoon
SSH key fingerprint: SHA256:UUF9JT2s8Xfyv76b8ZuVL7XrmimH4o49p4b+iexbVH4
1 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
hosts/nixos/lapetus/services/invidious.nix
View file

@ -4,8 +4,9 @@
../../common/optional/services/postgres.nix
];
sops.secrets.invidious_hmac_key = {
sopsFile = ../secrets.yaml;
sops.secrets.invidious_hmac_key.sopsFile = ../secrets.yaml;
sops.templates."invidious_hmac_key.json" = {
content = ''{ "hmac_key": "${config.sops.placeholder.invidious_hmac_key}" }'';
mode = "0444"; # I don't care about this key that much, as I'm the only user of this instance
};
@ -16,7 +17,7 @@
enable = true;
domain = "yt.moonythm.dev";
port = 8414;
hmacKeyFile = config.sops.secrets.invidious_hmac_key.path;
hmacKeyFile = config.sops.templates."invidious_hmac_key.json".path;
nginx.enable = true;
@ -25,7 +26,6 @@
admins = [ "prescientmoon" ];
default_user_preferences = {
default_home = "Subscriptions";
max_results = 40;
comments = [ "youtube" "reddit" ];
save_player_pos = true;
automatic_instance_redirect = true;