NyxErinys/Nix-Config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

import secrets right

Browse source
This commit is contained in:
NyxErinys 2026-06-13 03:50:59 -05:00
parent 9175694ea4
commit 8b449ec721
2 changed files with 11 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

9
modules/k3s/default.nix
View file

@ -4,6 +4,10 @@ let
cfg = config.nyxs-nix.services.k3s; cfg = config.nyxs-nix.services.k3s;
in in
{ {
imports = [
./secrets.nix
];
options.nyxs-nix.services.k3s = with types; { options.nyxs-nix.services.k3s = with types; {
enable = mkEnableOption "Enable the vrrp quotes service"; enable = mkEnableOption "Enable the vrrp quotes service";
@ -15,10 +19,7 @@ in
}; };
config = mkIf cfg.enable { config = mkIf cfg.enable {
imports = [
./secrets.nix
];
networking.firewall.allowedTCPPorts = [ networking.firewall.allowedTCPPorts = [
6443 # k3s, api server 6443 # k3s, api server
2379 # k3s, etcd clients 2379 # k3s, etcd clients

8
modules/k3s/secrets.nix
View file

@ -1,6 +1,10 @@
{ config, ... }: { config, lib, ... }:
with lib;
let
cfg = config.nyxs-nix.services.k3s;
in
{ {
sops.templates = { sops.templates = mkIf cfg.enable {
"authentik-secrets.yaml" = { "authentik-secrets.yaml" = {
content = '' content = ''
apiVersion: v1 apiVersion: v1