prescientmoon/satellite
1
Fork 0
Code Activity

Fix invidious hmac key perms

Browse source
This commit is contained in:
prescientmoon 2024-03-11 16:21:53 +01:00
parent c8885be2c2
commit aa89185312
Signed by: prescientmoon
SSH key fingerprint: SHA256:UUF9JT2s8Xfyv76b8ZuVL7XrmimH4o49p4b+iexbVH4
1 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
hosts/nixos/lapetus/services/invidious.nix
View file

@ -4,7 +4,11 @@
../../common/optional/services/postgres.nix
];
sops.secrets.invidious_hmac_key.sopsFile = ../secrets.yaml;
sops.secrets.invidious_hmac_key = {
sopsFile = ../secrets.yaml;
mode = "0444"; # I don't care about this key that much, as I'm the only user of this instance
};
services.nginx.virtualHosts.${config.services.invidious.domain} =
config.satellite.proxy config.services.invidious.port { };