tlaternet/tlaternet-server
1
0
Fork 0
Code Issues 8 Pull requests Activity

refactor(sops): Move secret definitions to specific modules

Browse source
This commit is contained in:
Tristan Daniël Maat 2025-11-14 10:54:51 +08:00
parent 767a14ab6e
commit 7fcaa34b28
Signed by: tlater
GPG key ID: 02E935006CF2E8E7
15 changed files with 81 additions and 105 deletions
Download patch file Download diff file Expand all files Collapse all files

11
configuration/services/metrics/grafana.nix
View file

@ -67,4 +67,15 @@ in
};
};
};
sops.secrets = {
"grafana/adminPassword" = {
owner = "grafana";
group = "grafana";
};
"grafana/secretKey" = {
owner = "grafana";
group = "grafana";
};
};
}

8
configuration/services/metrics/victoriametrics.nix
View file

@ -4,7 +4,7 @@ let
blackbox_port = config.services.prometheus.exporters.blackbox.port;
in
{
config.services.victoriametrics = {
services.victoriametrics = {
enable = true;
extraOptions = [ "-storage.minFreeDiskSpaceBytes=5GB" ];
@ -96,4 +96,10 @@ in
victorialogs.targets = [ config.services.victorialogs.bindAddress ];
};
};
sops.secrets."forgejo/metrics-token" = {
owner = "forgejo";
group = "metrics";
mode = "0440";
};
}