diff options
Diffstat (limited to 'hosts')
| -rw-r--r-- | hosts/nyaan/network.nix | 4 | ||||
| -rw-r--r-- | hosts/sagittarius/sops.nix | 7 | ||||
| -rw-r--r-- | hosts/sagittarius/web/vaultwarden.nix | 2 |
3 files changed, 7 insertions, 6 deletions
diff --git a/hosts/nyaan/network.nix b/hosts/nyaan/network.nix index 617b769..ea5c278 100644 --- a/hosts/nyaan/network.nix +++ b/hosts/nyaan/network.nix @@ -15,10 +15,6 @@ in }; }; - security.pki.certificateFiles = [ - ../../etc/certs/sagittarius.internal.crt - ]; - networking = { hostName = "nyaan"; useNetworkd = true; diff --git a/hosts/sagittarius/sops.nix b/hosts/sagittarius/sops.nix index 2d08b24..539f7b3 100644 --- a/hosts/sagittarius/sops.nix +++ b/hosts/sagittarius/sops.nix @@ -19,7 +19,12 @@ format = "binary"; }; "wg-ca-key" = { - sopsFile = ../../secrets/ca/sagittarius.key; + sopsFile = ../../secrets/ca/sagittarius.internal.key; + owner = "nginx"; + format = "binary"; + }; + "wg-ca-crt" = { + sopsFile = ../../secrets/ca/sagittarius.internal.crt; owner = "nginx"; format = "binary"; }; diff --git a/hosts/sagittarius/web/vaultwarden.nix b/hosts/sagittarius/web/vaultwarden.nix index 90e22f3..72db42b 100644 --- a/hosts/sagittarius/web/vaultwarden.nix +++ b/hosts/sagittarius/web/vaultwarden.nix @@ -31,7 +31,7 @@ in ]; sslCertificateKey = secrets."wg-ca-key".path; - sslCertificate = ../../../etc/certs/sagittarius.internal.crt; + sslCertificate = secrets."wg-ca-crt".path; locations."/" = { proxyPass = "http://127.0.0.1:${toString cfg.ROCKET_PORT}"; |