aboutsummaryrefslogtreecommitdiff
path: root/modules/services/traefik
diff options
context:
space:
mode:
Diffstat (limited to 'modules/services/traefik')
-rw-r--r--modules/services/traefik/default.nix8
1 files changed, 2 insertions, 6 deletions
diff --git a/modules/services/traefik/default.nix b/modules/services/traefik/default.nix
index d6a8c8c..a5cff3d 100644
--- a/modules/services/traefik/default.nix
+++ b/modules/services/traefik/default.nix
@@ -4,6 +4,7 @@ with lib;
let
cfg = config.my.services.traefik;
+ secrets = config.age.secrets;
domainPublic = "fcuny.net";
domainPrivate = "fcuny.xyz";
mkServiceConfig = name: url: domain: certResolver: {
@@ -22,11 +23,6 @@ in {
};
config = lib.mkIf cfg.enable {
- age.secrets.traefik_gcp_sa = {
- file = ../../../secrets/traefik/gcp_service_account.json.age;
- owner = "traefik";
- };
-
services.traefik = {
enable = true;
@@ -94,7 +90,7 @@ in {
];
systemd.services.traefik.environment.GCE_SERVICE_ACCOUNT_FILE =
- config.age.secrets.traefik_gcp_sa.path;
+ secrets."traefik/gcp_service_account.json".path;
systemd.services.traefik.environment.GCE_PROJECT = "fcuny-homelab";
networking.firewall.allowedTCPPorts = [ 80 443 ];