servius/dotfiles
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: Added attic ATTIC_SERVER_TOKEN_RS256_SECRET_BASE64
Some checks failed
Flake checker / Build Nix targets (push) Has been cancelled
Details

Browse Source
This commit is contained in:
Servius
2026-02-11 16:56:23 +05:30
parent 21e779c304
commit 6b31922615
2 changed files with 16 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
nixos/tako/services/attic.nix
View File

@@ -1,16 +1,21 @@
{...}: {
{config, ...}: let
socket = "/run/attic/attic.sock";
in {
sops = {
secrets."attic/jwt_secret" = {};
templates."attic.env".content = ''
ATTIC_SERVER_TOKEN_RS256_SECRET_BASE64=${config.sops.placeholder."attic/jwt_secret"}
'';
};
services = {
atticd = {
enable = true;
listen = "/run/attic/attic.sock";
settings.listen = socket;
environmentFile = config.sops.templates."attic.env".path;
};
caddy = {
virtualHosts."cache.darksailor.dev".extraConfig = ''
reverse_proxy /run/attic/attic.sock {
transport http {
protocol = "fd"
}
}
reverse_proxy unix/${socket}
'';
};
};