opdavies/nix-config
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Use agenix to encrypt secrets

Browse source
This commit is contained in:
Oliver Davies 2024-12-09 22:35:34 +00:00
parent 04c32edb04
commit c01820a33b
7 changed files with 137 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

14
nix/modules/nixos/features/homelab/tubearchivist-container.nix
View file

@ -29,13 +29,16 @@ in
image = "bbilly1/tubearchivist-es";
environment = {
"ELASTIC_PASSWORD" = "verysecret";
"ES_JAVA_OPTS" = "-Xms1g -Xmx1g";
"discovery.type" = "single-node";
"path.repo" = "/usr/share/elasticsearch/data/snapshot";
"xpack.security.enabled" = "true";
};
environmentFiles = [
config.age.secrets.tubearchivist.path
];
volumes = [
"tubearchivist_es:/usr/share/elasticsearch/data:rw"
];
@ -125,17 +128,18 @@ in
image = "bbilly1/tubearchivist";
environment = {
"ELASTIC_PASSWORD" = "verysecret";
"ES_URL" = "http://archivist-es:9200";
"HOST_GID" = "1000";
"HOST_UID" = "1000";
"REDIS_HOST" = "archivist-redis";
"TA_HOST" = "tubearchivist.local";
"TA_PASSWORD" = "verysecret";
"TA_USERNAME" = "tubearchivist";
"TZ" = "America/New_York";
"TZ" = "Europe/London";
};
environmentFiles = [
config.age.secrets.tubearchivist.path
];
volumes = [
"tubearchivist_cache:/cache:rw"
"tubearchivist_media:/youtube:rw"