diff --git a/hosts/app-01/default.nix b/hosts/app-01/default.nix index 011c19d..ef315d9 100644 --- a/hosts/app-01/default.nix +++ b/hosts/app-01/default.nix @@ -19,6 +19,13 @@ spice.enable = true; sops.secrets = { + "MINIFLUX_SECRETS" = { + sopsFile = ../../secrets/app-01_miniflux.env; + format = "binary"; + # Not necessary + owner = "miniflux"; + mode = "0400"; + }; "SEARXNG_SECRETS" = { sopsFile = ../../secrets/app-01_searxng.env; format = "binary"; @@ -35,6 +42,10 @@ }; dockerserver.enable = true; + miniflux = { + enable = true; + environmentFile = config.sops.secrets."MINIFLUX_SECRETS".path; + }; radicale.enable = true; searxng = { enable = true; diff --git a/secrets/app-01_miniflux.env b/secrets/app-01_miniflux.env new file mode 100644 index 0000000..0319008 --- /dev/null +++ b/secrets/app-01_miniflux.env @@ -0,0 +1,26 @@ +{ + "data": "ENC[AES256_GCM,data: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,iv:WyWUJWDqQKSiISzI8mGzd1G2Jh+sl/V2+eNo240btrI=,tag:R3HRAKetgyjuiBIpmTmbsg==,type:str]", + "sops": { + "age": [ + { + "recipient": "age1jmsrfddctahhznfv7jv77tgw5crmhjhe0e0kzc967hvax4sulv3s6hp2su", + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVWWxScEIwWW1zbUY2c0lR\nNVRnTEZlY3lBT05VSlpUN01kLzhiaG5WRndFClhpTEVYalJ6dndPOUJ1Z3VycHJn\ndHpJc2VtTTl2YW1lL3lMOHhyeHhnSE0KLS0tIFNYUVV6blZBa2lwUnhJakVxd2p5\nU1lYaDBweTFZbEhxL2s1RGVDYjh6MTQKFgq1AEMFaumbp7vNFaq7O6qeeLkuH/kS\nCVXwqUzOy5I7LBovz4Ady/zQNa0LyVvQY+86opKXVtoSC3UsxpG8NA==\n-----END AGE ENCRYPTED FILE-----\n" + }, + { + "recipient": "age1g0vx0dgpzy3et6kuejf4xn4n0acr3666p8j4ygaulefh5mq3vyxs7mgjat", + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3emZ1eGRBS2VkWTI4SW9i\nWkxYVTg0UjRyV1Qzd2M2bHhKc1hNUGs1WURNClBYeEFmMzZlY1I1NnV0YWZPV3Vh\nTVA2V0lDS3o0Q253OHBWWlh5K3E2dlUKLS0tIENlTXErVVI1UTJBQ3ZrR1VnUU5y\nTnVpQUxKVWFGUlhYQmVxVVIyUUk5cUkKcuKh/Ol01ZjhNxseGesOoNOy5jZP/WST\n4AlYbUeCXHoi1uubS/BMeE9zjX8OVk142BwNXaUec1Qw6mohtPkhSQ==\n-----END AGE ENCRYPTED FILE-----\n" + }, + { + "recipient": "age17w0f4mg8w4cqcxg4z7spp8danq8yfxxcex7jvasxtunz2z7rkdjsm4m2hf", + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxSHN2ek5tNTVMd0FES3pl\naFBPK01kbmhsZlo1VnI0NFp4cHpKN0w4a1g0CkNBYXA2ckRmT3hFOGd2VktJZWFh\ndEtwK3FBWlRCM0VneVBzRWdsdXNCYlkKLS0tIEdrSlBvMnVBcTlpRmVmWDVOSTRQ\nTkpZTkYzT05mTi9XVkhWQzZzR0liajAKLsk3PyFiPF7bc92F418r5Bl/rP14d4I1\nli5eeSQv0ZWR2pNSI+KfZP0jdG2ZwMky+mgeI+ldNEoSoGk0+0fXIg==\n-----END AGE ENCRYPTED FILE-----\n" + }, + { + "recipient": "age1d0crvyst36euqdjsfu22xx87njd9gnmgdam0m289472h8ycmmc9s04v9ru", + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPUkJIem5KbVNFRTJUQXF3\nRGN3dlJ1UDJEUkhja3pnaUpxM1R3M0F0ZGpRCkNYT2hQWWV0QkdwZWg0c3lEb1BS\nVkRFeE80NTdwc01LL1VudkFteGRna2sKLS0tIEswVVljdkYreE43cmt0YUZUOFB4\nRmxEbU9PVXRyQkxjWnhpMGh1c3ZaZ0kKATy2+pCE4iJ4U5P8hvjNIP7a3bu9cKXV\n4wk3LoDgEytia6WzYtETJt07RMMOBqtxHo0t5UaelD+pIsOVp5Bbag==\n-----END AGE ENCRYPTED FILE-----\n" + } + ], + "lastmodified": "2025-11-13T04:33:14Z", + "mac": "ENC[AES256_GCM,data:DnnQ8XIKfaC9FopXwguzKS8YvTXVFsl0Z2zm1WuIFBoDHFcZVPHOPpYNLVA8rMJ8woW1XVFHOGqcGLI3NDliraTl0PfIsUGMCvRrcZvEYab3upW204CBu/cZpf283XNiloXGYQ0YvUcMasbE8kruO3KilYVCpj546PfZv0tgNag=,iv:GtdNwFOPEXJHvxWFQpN5wBDqyEuQ6cFohMwC6Yb9ezA=,tag:ASrOKj90kppRabgcIlCn2w==,type:str]", + "version": "3.11.0" + } +}