colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity
Files
fc4fadbb5bb03bbd028e6d058a06777b91ba16dd
nix-files/secrets/servo
History
Colin 0a3a60ab38 servo: port coturn shared secret to sops 
NOW i can delete derived-secrets
2024-09-28 14:25:40 +00:00
..
bitcoin.conf.bin
bitcoin: add myself as an authenticated rpcuser
2024-01-02 18:11:46 +00:00
coturn_shared_secret.bin
servo: port coturn shared secret to sops
2024-09-28 14:25:40 +00:00
ddns_afraid.env.bin
secrets: split ddns_afraid out of servo.yaml
2023-05-14 08:37:13 +00:00
ddns_he.env.bin
secrets: split ddns_he out of servo.yaml
2023-05-14 08:36:04 +00:00
dovecot_passwd.bin
secrets: split dovecot_passwd out of servo.yaml
2023-05-14 08:40:35 +00:00
freshrss_passwd.bin
secrets: split freshrss_passwd out of servo.yaml
2023-05-14 08:41:27 +00:00
lightning-config.bin
servo: clightning: fix deprecated config
2024-07-07 00:53:29 +00:00
matrix_access_token.bin
matrix-synapse: auto-register the ntfy-sh push gateway at launch
2023-10-24 14:47:59 +00:00
matrix_synapse_secrets.yaml.bin
secrets: split matrix_synapse_secrets out of servo.yaml
2023-05-14 08:46:40 +00:00
mautrix_signal_env.bin
mautrix-signal: define the shared secrets statically
2023-01-16 11:43:17 +00:00
mediawiki_pw.bin
secrets: split mediawiki_pw out of servo.yaml
2023-05-14 08:33:22 +00:00
nix_signing_key.bin
refactor: nix_serve_privkey -> nix_signing_key
2024-05-16 02:48:16 +00:00
ovpn_privkey.bin
servo: import ovpn privkey
2024-05-26 14:37:33 +00:00
pleroma_secrets.bin
servo: fix pleroma secret config syntax
2023-05-15 00:58:31 +00:00
README.md
refactor: nix_serve_privkey -> nix_signing_key
2024-05-16 02:48:16 +00:00
slskd_env.bin
servo: enable Soulseek
2023-11-28 11:46:47 +00:00
wg_doof_privkey.bin
servo: bridge to doof.net
2024-05-20 05:08:32 +00:00
wg_ovpns_privkey.bin
secrets: split wg_ovpns_privkey out of servo.yaml
2023-05-14 08:38:46 +00:00
wg-home.priv.bin
wg-home: port away from derived-secrets
2024-09-28 14:25:40 +00:00

README.md

  • ddns_he.env.bin: Hurricane Electric (he.net) passphrase
  • ddns_afraid.env.bin: freedns.afraid.org API key
  • dovecot_passwd: auth for mail accounts
    • passwd file looks like /etc/passwd
    • generate pw hash with: nix run nixpkgs.apacheHttpd -c htpasswd -nbB "" "my passwd"
  • matrix_synapse_secrets:
    • for the smtp_pass; the rest isn't sensitive
  • nix_signing_key.bin:
    • generate with nix-store --generate-binary-cache-key nixcache.uninsane.org cache-priv-key.pem cache-pub-key.pem
    • pubkey: nixcache.uninsane.org:r3WILM6+QrkmsLgqVQcEdibFD7Q/4gyzD9dGT33GP70=
    • used when deploying packages to a remote machine
  • wg_ovpns_privkey.bin: wireguard private key for OVPN
    • to generate:
      • wg genkey > wg0.private
      • wg pubkey < wg0.private > wg0.public