tbarnouin/nixos-hypervisor
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add capi cred file

Browse source
This commit is contained in:
Théo Barnouin 2025-05-28 10:52:19 +02:00
parent 88b4688956
commit 188fe4c1dc
5 changed files with 954 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

5
services/nginx/default.nix
View file

@ -26,6 +26,10 @@ in {
file = ./secrets/cs-lapi-key.age;
owner = "crowdsec";
};
age.secrets.nginx-capi-key = {
file = ./secrets/cs-capi-key.age;
owner = "crowdsec";
};
services = {
crowdsec-firewall-bouncer = {
enable = true;
@ -42,6 +46,7 @@ in {
listen_uri = "${cfg.proxy_ip}:8080";
};
lapi.credentialsFile = "${config.age.secrets.nginx-lapi-key.path}";
capi.credentialsFile = "${config.age.secrets.nginx-capi-key.path}";
};
hub.collections = [
"firix/authentik"