switch to ssh store
This commit is contained in:
parent
b779a8a3fe
commit
84c15ddf0e
1 changed files with 7 additions and 19 deletions
|
@ -1,22 +1,10 @@
|
||||||
{ config, pkgs, ... }:
|
{ config, pkgs, ... }: {
|
||||||
let
|
nix.settings.trusted-users = [ "nix-ssh" ];
|
||||||
objectsPort = 10000;
|
nix.sshServe = {
|
||||||
adminPort = 10001;
|
|
||||||
in {
|
|
||||||
sops.secrets."minio-env" = {
|
|
||||||
sopsFile = ./minio.sops;
|
|
||||||
format = "binary";
|
|
||||||
};
|
|
||||||
|
|
||||||
networking.firewall.allowedTCPPorts = [ objectsPort adminPort ];
|
|
||||||
|
|
||||||
services.minio = {
|
|
||||||
enable = true;
|
enable = true;
|
||||||
region = "cyplodev";
|
write = true;
|
||||||
dataDir = [ "/var/lib/minio/data" ];
|
keys = [
|
||||||
configDir = "/var/lib/minio/config";
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF4OvRjIUlO2TGPTjYNXbgFuP95uvbszyBjqvAC+Z8zH release-bot@cyplo.dev"
|
||||||
listenAddress = ":${toString objectsPort}";
|
];
|
||||||
consoleAddress = ":${toString adminPort}";
|
|
||||||
rootCredentialsFile = "${config.sops.secrets.minio-env.path}";
|
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in a new issue