This repository has no description
869 B
34 lines
1{ config, lib, pkgs, ... }:
2{
3 imports = [
4 ../../2configs
5 ../../2configs/retiolum.nix
6 ../../2configs/syncthing.nix
7 ../../2configs/services/radio
8 ];
9
10 clanCore.facts.secretUploadDirectory = lib.mkForce "/var/state/secrets";
11
12 krebs.build.host = config.krebs.hosts.radio;
13 system.stateVersion = "24.05";
14
15 security.acme = {
16 acceptTerms = true;
17 defaults.email = "acme@lassul.us";
18 };
19
20 krebs.sync-containers3.inContainer = {
21 enable = true;
22 pubkey = builtins.readFile ./facts/radio.sync.pub;
23 };
24
25 clanCore.facts.services.radio-container = {
26 secret."radio.sync.key" = { };
27 public."radio.sync.pub" = { };
28 generator.path = with pkgs; [ coreutils openssh ];
29 generator.script = ''
30 ssh-keygen -t ed25519 -N "" -f "$secrets"/radio.sync.key
31 mv "$secrets"/radio.sync.key "$facts"/radio.sync.pub
32 '';
33 };
34}