macronova/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Fix secret permission

Browse source
This commit is contained in:
Invariantspace 2024-09-01 00:25:35 -07:00
parent b08a27c475
commit 45db567972
No known key found for this signature in database
GPG key ID: EBC4A20067373921
3 changed files with 9 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

13
linux/singularity/coturn.nix
View file

@ -1,8 +1,9 @@
{config, ...}: {
services.coturn = with config.constants; let
acmeDir = config.security.acme.certs.${coturn-realm}.directory;
coturn-realm = "turn.${domain}";
in {
{config, ...}:
with config.constants; let
acmeDir = config.security.acme.certs.${coturn-realm}.directory;
coturn-realm = "turn.${domain}";
in {
services.coturn = {
enable = true;
cert = "${acmeDir}/fullchain.pem";
listening-port = port.coturn;
@ -15,5 +16,5 @@
use-auth-secret = true;
};
sops.secrets.coturn = {};
sops.secrets.coturn.owner = "turnserver";
}