diff options
| author | Franck Cuny <franck@fcuny.net> | 2024-12-28 13:14:34 -0800 |
|---|---|---|
| committer | Franck Cuny <franck@fcuny.net> | 2024-12-28 13:14:34 -0800 |
| commit | 1f11bea4be519cbf2b08daac19acef93d2cb181a (patch) | |
| tree | afc4df047b9ba927a19f730eacab5c4876ab0873 /README.md | |
| parent | removed a few services from vm-synology (diff) | |
| download | infra-1f11bea4be519cbf2b08daac19acef93d2cb181a.tar.gz | |
remove secrets and agenix since nothing uses them
Diffstat (limited to 'README.md')
| -rw-r--r-- | README.md | 39 |
1 files changed, 0 insertions, 39 deletions
@@ -1,40 +1 @@ Tools, scripts, and configurations for my machines. - -# Secret management with `agenix` -I use `[agenix](https://github.com/ryantm/agenix)` to manage secrets. - -## Create a new secret -To create a new secret: -```shell -cd secrets -agenix -e <name of the secret>.age -``` - -## Manage the secrets -In [secrets.nix](secrets/secrets.nix) you need to add the secret and who need to have access to it. - -In the configuration for one of the host, you'll then need to add: -```nix -age.secrets.restic = { - file = ../../../secrets/restic-backups.age; - owner = "root"; - group = "root"; - path = "/etc/restic/secret"; - mode = "600"; -}; -``` - -## Edit secrets -This is the easiest command to work with 1password: -```shell -agenix -e restic-backups.age -i (op read "op://Personal/nixos/private key?ssh-format=openssh"|psub) -``` - -There's a target in the [Justfile](justfile) to edit the secrets: `just secrets <secret-name>`. - -# Services - -## ddns-updater -This service runs on `vm-synology`. - -There's a web UI accessible at <http://vm-synology:8000> to check the status of the updates. |
