cy/nixos-config
cy/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

include rclone config in secrets

Browse source
This commit is contained in:
cy 2024-12-26 19:30:22 -05:00
parent 1d3c6197dc
commit 19aa8a554e
3 changed files with 5 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
hosts/chunk/default.nix
View file

@ -36,7 +36,7 @@
"services/ntfy" = { "services/ntfy" = {
sopsFile = ../../secrets/services/ntfy.yaml; sopsFile = ../../secrets/services/ntfy.yaml;
}; };
"rclone/env" = { "rclone/config" = {
sopsFile = ../../secrets/rclone/chunk.yaml; sopsFile = ../../secrets/rclone/chunk.yaml;
}; };
"vaultwarden/env" = { "vaultwarden/env" = {

3
hosts/chunk/rclone.nix
View file

@ -13,9 +13,8 @@
serviceConfig = { serviceConfig = {
Type = "notify"; Type = "notify";
ExecStartPre = "/usr/bin/env mkdir -p /mnt/photos"; ExecStartPre = "/usr/bin/env mkdir -p /mnt/photos";
ExecStart = "${pkgs.rclone}/bin/rclone mount --config /home/yt/.config/rclone/rclone.conf --cache-dir /var/cache/rclone --transfers=32 --dir-cache-time 72h --vfs-cache-mode writes --vfs-cache-max-size 2G photos: /mnt/photos "; ExecStart = "${pkgs.rclone}/bin/rclone mount --config ${config.sops.secrets."rclone/config".path} --cache-dir /var/cache/rclone --transfers=32 --dir-cache-time 72h --vfs-cache-mode writes --vfs-cache-max-size 2G photos: /mnt/photos ";
ExecStop = "${pkgs.fuse}/bin/fusermount -u /mnt/photos"; ExecStop = "${pkgs.fuse}/bin/fusermount -u /mnt/photos";
EnvironmentFile = config.sops.secrets."rclone/env".path;
}; };
}; };

6
secrets/rclone/chunk.yaml
View file

@ -1,5 +1,5 @@
rclone: rclone:
env: ENC[AES256_GCM,data:e8O4cUbgFMseJTvzGyBhsD/beCkhuh/Sl4ZHqV/kQodcuKi3V9XHyeCAnBb/,iv:rOySfX7vQ1mduFEL4gSbM8rYk9Gp7aEcieV1CW+aGDk=,tag:aWmdde3Xv9IqLRigPZBH1w==,type:str] config: ENC[AES256_GCM,data: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,iv:/WQpWvaztRIo1sNyJK+owNJ+l2/sLt1eR/hw3TL7gDM=,tag:ikIVdlgHg9plfcgVunlcIA==,type:str]
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
@ -24,8 +24,8 @@ sops:
SFRuTGtCQWY0Si9ndlYyVTBlZUhlVGsK+xw1uyjf72JxqvYaA+eJXycGqm62J9kh SFRuTGtCQWY0Si9ndlYyVTBlZUhlVGsK+xw1uyjf72JxqvYaA+eJXycGqm62J9kh
WVkbwEFE3Z27N/xVgKw4kTFO/ZqrAx9dsF2gPB2wSERJ5ndzR5mzsA== WVkbwEFE3Z27N/xVgKw4kTFO/ZqrAx9dsF2gPB2wSERJ5ndzR5mzsA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-12-17T03:32:29Z" lastmodified: "2024-12-27T00:29:50Z"
mac: ENC[AES256_GCM,data:TTaw6wv7cidgcB7c2igUPo6urQ87d0btr5puTr9yA8ppJ0iTKdLQT2nIZI0OHnP/cFE/at0YrhDNNk5AL1y9fuATRWveu1Y2KmjlYNXLlZS4PdAr3rsUs3FqSECdTqXR8ZYGodA5mOSjzWu1eYuoubVk2wtXV0alMUY7bwrnr6E=,iv:1zslrT0FX6SIEIRHPloLa2Fy8pVJVqMDIghR46l5+xg=,tag:qpw9iQAetUIoqvDQzufh8w==,type:str] mac: ENC[AES256_GCM,data:OdFzyPSxUv+nKUC3OFfcvDuP/z6z/94O9nTRoBiEhsjKK30JhjuPSZL/N3AiWM0gEhqLBcvZgWpalKEc5dOJVQTOAm7Koz7aMK8Oi2OxCFeChKnIHnyTL3i194IbcjBzIV0TcU97WRNS1N5+8hSXLsBdStd+XiwCAspOQf8y1uc=,iv:FDoyspPtWf/a47Z6KXT+d71eLRWs0bzBc47rGrAqzx4=,tag:S51hhNAg5ojCCvkHpKIo2g==,type:str]
pgp: [] pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.9.2 version: 3.9.2