From 7a3ba1fe69dedad0e6338212464eece5329a68b2 Mon Sep 17 00:00:00 2001 From: Isabella Bastaja Date: Sun, 31 May 2026 20:59:15 +0200 Subject: fix CA stuff --- hosts/sagittarius/sops.nix | 7 ++++++- hosts/sagittarius/web/vaultwarden.nix | 2 +- 2 files changed, 7 insertions(+), 2 deletions(-) (limited to 'hosts/sagittarius') diff --git a/hosts/sagittarius/sops.nix b/hosts/sagittarius/sops.nix index 2d08b24..539f7b3 100644 --- a/hosts/sagittarius/sops.nix +++ b/hosts/sagittarius/sops.nix @@ -19,7 +19,12 @@ format = "binary"; }; "wg-ca-key" = { - sopsFile = ../../secrets/ca/sagittarius.key; + sopsFile = ../../secrets/ca/sagittarius.internal.key; + owner = "nginx"; + format = "binary"; + }; + "wg-ca-crt" = { + sopsFile = ../../secrets/ca/sagittarius.internal.crt; owner = "nginx"; format = "binary"; }; diff --git a/hosts/sagittarius/web/vaultwarden.nix b/hosts/sagittarius/web/vaultwarden.nix index 90e22f3..72db42b 100644 --- a/hosts/sagittarius/web/vaultwarden.nix +++ b/hosts/sagittarius/web/vaultwarden.nix @@ -31,7 +31,7 @@ in ]; sslCertificateKey = secrets."wg-ca-key".path; - sslCertificate = ../../../etc/certs/sagittarius.internal.crt; + sslCertificate = secrets."wg-ca-crt".path; locations."/" = { proxyPass = "http://127.0.0.1:${toString cfg.ROCKET_PORT}"; -- cgit v1.3.1