nix-files/secrets/servo
Colin 3f60206eef servo: clightning: tune config 2024-01-10 23:40:17 +00:00
..
README.md secrets: split matrix_synapse_secrets out of servo.yaml 2023-05-14 08:46:40 +00:00
bitcoin.conf.bin bitcoin: add myself as an authenticated rpcuser 2024-01-02 18:11:46 +00:00
ddns_afraid.env.bin secrets: split ddns_afraid out of servo.yaml 2023-05-14 08:37:13 +00:00
ddns_he.env.bin secrets: split ddns_he out of servo.yaml 2023-05-14 08:36:04 +00:00
dovecot_passwd.bin secrets: split dovecot_passwd out of servo.yaml 2023-05-14 08:40:35 +00:00
duplicity_passphrase.env.bin secrets: split duplicity_passphrase out of servo.yaml 2023-05-14 08:34:36 +00:00
freshrss_passwd.bin secrets: split freshrss_passwd out of servo.yaml 2023-05-14 08:41:27 +00:00
lightning-config.bin servo: clightning: tune config 2024-01-10 23:40:17 +00:00
matrix_access_token.bin matrix-synapse: auto-register the ntfy-sh push gateway at launch 2023-10-24 14:47:59 +00:00
matrix_synapse_secrets.yaml.bin secrets: split matrix_synapse_secrets out of servo.yaml 2023-05-14 08:46:40 +00:00
mautrix_signal_env.bin mautrix-signal: define the shared secrets statically 2023-01-16 11:43:17 +00:00
mediawiki_pw.bin secrets: split mediawiki_pw out of servo.yaml 2023-05-14 08:33:22 +00:00
nix_serve_privkey.bin secrets: split nix_serve_privkey out of servo.yaml 2023-05-14 08:43:07 +00:00
pleroma_secrets.bin servo: fix pleroma secret config syntax 2023-05-15 00:58:31 +00:00
slskd_env.bin servo: enable Soulseek 2023-11-28 11:46:47 +00:00
wg_ovpns_privkey.bin secrets: split wg_ovpns_privkey out of servo.yaml 2023-05-14 08:38:46 +00:00

README.md

  • ddns_he.env.bin: Hurricane Electric (he.net) passphrase
  • ddns_afraid.env.bin: freedns.afraid.org API key
  • dovecot_passwd: auth for mail accounts
    • passwd file looks like /etc/passwd
    • generate pw hash with: nix run nixpkgs.apacheHttpd -c htpasswd -nbB "" "my passwd"
  • matrix_synapse_secrets:
    • for the smtp_pass; the rest isn't sensitive
  • nix_serve_privkey.bin:
    • generate with nix-store --generate-binary-cache-key nixcache.uninsane.org cache-priv-key.pem cache-pub-key.pem
    • pubkey: nixcache.uninsane.org:r3WILM6+QrkmsLgqVQcEdibFD7Q/4gyzD9dGT33GP70=
  • wg_ovpns_privkey.bin: wireguard private key for OVPN
    • to generate:
      • wg genkey > wg0.private
      • wg pubkey < wg0.private > wg0.public