diff --git a/nixos/hosts/porcelain-doll-repair/default.nix b/nixos/hosts/porcelain-doll-repair/default.nix index f421e13..8847d82 100644 --- a/nixos/hosts/porcelain-doll-repair/default.nix +++ b/nixos/hosts/porcelain-doll-repair/default.nix @@ -18,13 +18,26 @@ mode = "0444"; }; + sops.templates."secrets.yaml" = { + content = lib.generators.toYAML { + db = { + pass = config.sops.placeholder.db_password; + }; + }; + owner = config.services.iceshrimp.user; + group = config.services.iceshrimp.group; + }; + + services.iceshrimp = { enable = true; settings.url = "https://porcelain.doll.repair"; dbPasswordFile = config.sops.secrets.db_password.path; createDb = true; configureNginx.enable = false; + secretConfig = config.sops.templates."secrets.yaml".path; }; + services.postgresql.package = pkgs.postgresql_15; services.redis.servers.iceshrimp.logfile = "stdout"; }