X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=nixops%2Fmodules%2Ftask%2Fdefault.nix;h=9671725b7f9f4d38f08a0ad35e134562ad0ad6ae;hb=32c84ff89c2b8931f58cea63961a178a9b1d0efe;hp=2001eaa7d1ed34e640d0f4c9c0047ee7d650f568;hpb=742697c95318d3625298437995e948ee00a00ba5;p=perso%2FImmae%2FConfig%2FNix.git diff --git a/nixops/modules/task/default.nix b/nixops/modules/task/default.nix index 2001eaa..9671725 100644 --- a/nixops/modules/task/default.nix +++ b/nixops/modules/task/default.nix @@ -87,8 +87,8 @@ in { }; config = lib.mkIf cfg.enable { - deployment.keys.tools-taskwarrior-web = { - destDir = "/run/keys/webapps"; + mySecrets.keys = [{ + dest = "webapps/tools-taskwarrior-web"; user = "wwwrun"; group = "wwwrun"; permissions = "0400"; @@ -101,7 +101,7 @@ in { SetEnv TASKD_LDAP_BASE "${env.ldap.base}" SetEnv TASKD_LDAP_FILTER "${env.ldap.search}" ''; - }; + }]; security.acme.certs."eldiron".extraDomains.${fqdn} = null; services.myWebsites.tools.modules = [ "proxy_fcgi" "sed" ]; services.myWebsites.tools.vhostConfs.task = { @@ -116,7 +116,7 @@ in { SetHandler "proxy:unix:/var/run/phpfpm/task.sock|fcgi://localhost" - Include /run/keys/webapps/tools-taskwarrior-web + Include /var/secrets/webapps/tools-taskwarrior-web '' ''