53 lines
1.3 KiB
Nix
Executable file
53 lines
1.3 KiB
Nix
Executable file
{ config, lib, ... }:
|
|
let
|
|
inherit (lib) optionalAttrs mkIf hasAttr;
|
|
in
|
|
{
|
|
sops = {
|
|
secrets = {
|
|
"lam/env" = { };
|
|
|
|
"acme/pdns" = mkIf (hasAttr "acme" config.users.users) {
|
|
owner = "acme";
|
|
};
|
|
"crowdsec/lapi.yaml" = mkIf config.services.crowdsec.enable {
|
|
owner = "crowdsec";
|
|
mode = "0600";
|
|
};
|
|
"crowdsec/capi.yaml" = mkIf config.services.crowdsec.enable {
|
|
owner = "crowdsec";
|
|
mode = "0600";
|
|
};
|
|
"crowdsec/consoleToken" = mkIf config.services.crowdsec.enable {
|
|
owner = "crowdsec";
|
|
mode = "0600";
|
|
};
|
|
"cloudflare/secret" = mkIf (hasAttr "acme" config.users.users) {
|
|
owner = "acme";
|
|
mode = "0600";
|
|
};
|
|
"rspamd" = mkIf config.services.rspamd.enable {
|
|
owner = config.services.rspamd.user;
|
|
group = config.services.rspamd.group;
|
|
mode = "0660";
|
|
};
|
|
}
|
|
// (optionalAttrs config.services.stalwart.enable (
|
|
let
|
|
inherit (config.users.users.stalwart) name group;
|
|
owner = name;
|
|
in
|
|
{
|
|
"stalwart/adminPassword" = {
|
|
inherit group owner;
|
|
};
|
|
"stalwart/tsig" = {
|
|
inherit group owner;
|
|
};
|
|
"stalwart/ldap" = {
|
|
inherit group owner;
|
|
};
|
|
}
|
|
));
|
|
};
|
|
}
|