diff options
| author | Isabella Bastaja <isabella@sorre.xyz> | 2026-05-31 20:59:15 +0200 |
|---|---|---|
| committer | Isabella Bastaja <isabella@sorre.xyz> | 2026-05-31 21:03:02 +0200 |
| commit | 7a3ba1fe69dedad0e6338212464eece5329a68b2 (patch) | |
| tree | 79736e67b48260bc911c43c6d45972631ce1550f /hosts/sagittarius | |
| parent | dba42580be3a7974583e2fe1de3b696a1055a71c (diff) | |
fix CA stuff
Diffstat (limited to 'hosts/sagittarius')
| -rw-r--r-- | hosts/sagittarius/sops.nix | 7 | ||||
| -rw-r--r-- | hosts/sagittarius/web/vaultwarden.nix | 2 |
2 files changed, 7 insertions, 2 deletions
diff --git a/hosts/sagittarius/sops.nix b/hosts/sagittarius/sops.nix index 2d08b24..539f7b3 100644 --- a/hosts/sagittarius/sops.nix +++ b/hosts/sagittarius/sops.nix @@ -19,7 +19,12 @@ format = "binary"; }; "wg-ca-key" = { - sopsFile = ../../secrets/ca/sagittarius.key; + sopsFile = ../../secrets/ca/sagittarius.internal.key; + owner = "nginx"; + format = "binary"; + }; + "wg-ca-crt" = { + sopsFile = ../../secrets/ca/sagittarius.internal.crt; owner = "nginx"; format = "binary"; }; diff --git a/hosts/sagittarius/web/vaultwarden.nix b/hosts/sagittarius/web/vaultwarden.nix index 90e22f3..72db42b 100644 --- a/hosts/sagittarius/web/vaultwarden.nix +++ b/hosts/sagittarius/web/vaultwarden.nix @@ -31,7 +31,7 @@ in ]; sslCertificateKey = secrets."wg-ca-key".path; - sslCertificate = ../../../etc/certs/sagittarius.internal.crt; + sslCertificate = secrets."wg-ca-crt".path; locations."/" = { proxyPass = "http://127.0.0.1:${toString cfg.ROCKET_PORT}"; |