diff --git a/nix/hosts/chaewon/sys.nix b/nix/hosts/chaewon/sys.nix index fddbc92..a57418d 100644 --- a/nix/hosts/chaewon/sys.nix +++ b/nix/hosts/chaewon/sys.nix @@ -74,6 +74,22 @@ services.stirling-pdf.enable = true; + services.readeck = { + enable = true; + settings = { + main = { + log_level = "info"; + secret_key = builtins.readFile config.age.secrets.readeck-secret-key.path; + data_directory = "data"; + }; + server = { + host = "127.0.0.1"; + port = 8060; + trusted_proxies = [ "127.0.0.1" ]; + }; + }; + }; + system.stateVersion = "23.11"; home-manager.users.priime = { pkgs, ... }: { imports = [ ./home.nix ]; }; } diff --git a/nix/modules/secrets.nix b/nix/modules/secrets.nix index 7267cfb..77ff5bd 100644 --- a/nix/modules/secrets.nix +++ b/nix/modules/secrets.nix @@ -2,5 +2,6 @@ { age.secrets = { forgejo-runner-token.file = ../../secrets/forgejo-runner-token.age; + readeck-secret-key.file = ../../secrets/readeck-secret-key.age; }; } diff --git a/secrets/readeck-secret-key.age b/secrets/readeck-secret-key.age new file mode 100644 index 0000000..0b4a442 --- /dev/null +++ b/secrets/readeck-secret-key.age @@ -0,0 +1,10 @@ +-----BEGIN AGE ENCRYPTED FILE----- +YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IEIrN21jdyBaTGFH +amdhYlkyNG1nMGZ5L3RNQ1VSRFI1eTRwa3Y2NElDbEVOQVorV2xvCkUwMkw0SWd6 +MnpHUVArVUMyTVlHV0FVMXlzc2ZjeTdQU2EvVEJjQ1lGRGsKLT4gc3NoLWVkMjU1 +MTkgN045S1hnIDdDRU52Wmo1MDRKSWpqWmcvWXN2QmJmZmJiTzhCQ0xvV1I2bmsv +VWNtSDgKQ1BCSk41VWdDbldVeGFBbkJlMzhiaVA3eXVWQTZEbE5NRUZrVlRRSk1y +SQotPiA2Yn00YERgLWdyZWFzZSB1CkV3Ci0tLSBhOENzR3oxZlc3S0xYd0h5TStB +dlhuTnJ0MUQ2THdEVGhrOE1mSnpueXBrCp7RcSTYek9WrJnwMVId54aIc3LyupwV +Nyuhojbajdh33VsdLuwse60HYTQdU6xx8CDM +-----END AGE ENCRYPTED FILE----- diff --git a/secrets/secrets.nix b/secrets/secrets.nix index 20213a5..4a383b0 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -4,4 +4,5 @@ let in { "forgejo-runner-token.age".publicKeys = [ main chaewon ]; + "readeck-secret-key.age".publicKeys = [ main chaewon ]; }