RGBCube/ncc
1
Fork 0
mirror of https://github.com/RGBCube/ncc synced 2025-07-29 19:17:45 +00:00
Code Issues Activity

Fix secret persm

Browse source
This commit is contained in:
RGBCube 2024-01-13 12:32:30 +03:00
parent cb802cabd7
commit 481617ce28
No known key found for this signature in database
5 changed files with 22 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

4
hosts/cube/grafana.nix
View file

@ -5,7 +5,7 @@ let
fqdn = "metrics.${domain}";
in serverSystemConfiguration {
age.secrets."cube.mail.password" = {
age.secrets."cube.mail.password.grafana" = {
owner = "grafana";
group = "grafana";
};
@ -33,7 +33,7 @@ in serverSystemConfiguration {
settings.security = {
admin_email = "metrics@${domain}";
admin_password = "$__file{${config.age.secrets."cube.mail.password".path}}";
admin_password = "$__file{${config.age.secrets."cube.mail.password.grafana".path}}";
};
};

7
hosts/cube/mail.nix
View file

@ -5,10 +5,15 @@ let
fqdn = "mail.${domain}";
in serverSystemConfiguration {
age.secrets."cube.mail.password.dmarc" = {
owner = "dmarc-exporter";
group = "dmarc-exporter";
};
services.prometheus.exporters = {
dmarc = enabled {
imap.host = domain;
imap.passwordFile = config.age.secrets."cube.mail.password".path;
imap.passwordFile = config.age.secrets."cube.mail.password.dmarc".path;
imap.username = "contact@${domain}";
listenAddress = "::";