numbus/numbus
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fixed secrets

Browse Source
This commit is contained in:
Raphaël Numbus
2026-01-04 09:50:11 +01:00
parent a4d1681c38
commit 234130fe02
2 changed files with 60 additions and 60 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deploy.conf
+13 -13
View File
@@ -1,19 +1,19 @@
#TARGET SETTINGS #TARGET SETTINGS
TARGET_HOST="192.168.1.10" export TARGET_HOST="192.168.1.10"
SSH_PUBLIC_KEY="ssh-ed25519 AAAAoefzefpoipoeCEZJCPEACPAcjapjcpajepcjAPJECJPEJAPJAZ yours@yourdomain.com" export SSH_PUBLIC_KEY="ssh-ed25519 AAAAoefzefpoipoeCEZJCPEACPAcjapjcpajepcjAPJECJPEJAPJAZ yours@yourdomain.com"
# TRAEFIK SETTINGS # TRAEFIK SETTINGS
DOMAIN_NAME="yourdomain.com" export DOMAIN_NAME="yourdomain.com"
EMAIL_ADDRESS="your-mail@yourdomain.com" export EMAIL_ADDRESS="your-mail@yourdomain.com"
CF_DNS_API_TOKEN="yourToken" export CF_DNS_API_TOKEN="yourToken"
# SMTP SETTINGS # SMTP SETTINGS
SENDER_EMAIL_ADDRESS="youraddress@gmail.com" export SENDER_EMAIL_ADDRESS="youraddress@gmail.com"
SENDER_EMAIL_ADDRESS_PASSWORD="emrp raps vzoi vnoe" export SENDER_EMAIL_ADDRESS_PASSWORD="emrp raps vzoi vnoe"
SENDER_EMAIL_DOMAIN="smtp.yourdomain.com" export SENDER_EMAIL_DOMAIN="smtp.yourdomain.com"
SENDER_EMAIL_PORT="587" export SENDER_EMAIL_PORT="587"
#NETWORK SETTINGS #NETWORK SETTINGS
HOME_ROUTER_SUBNET="192.168.1.0/24" export HOME_ROUTER_SUBNET="192.168.1.0/24"
HOME_ROUTER_IP="192.168.1.1" export HOME_ROUTER_IP="192.168.1.1"
HOME_SERVER_IP="192.168.1.5" export HOME_SERVER_IP="192.168.1.5"
# SERVICES SETTINGS # SERVICES SETTINGS
SELECTED_SERVICES=( "frigate" "gitea" "home-assistant" "immich" "it-tools" \ export SELECTED_SERVICES=( "frigate" "gitea" "home-assistant" "immich" "it-tools" \
"nextcloud" "passbolt" "pi-hole" "virtualization" ) "nextcloud" "passbolt" "pi-hole" "virtualization" )
templates/nix-config/sops-nix/secrets.yaml
+47 -47
View File
@@ -1,68 +1,68 @@
ssh_public_keys: $SSH_PUBLIC_KEY ssh_public_keys: "$SSH_PUBLIC_KEY"
sender_email_address_password: $SENDER_EMAIL_ADDRESS_PASSWORD sender_email_address_password: "$SENDER_EMAIL_ADDRESS_PASSWORD"
podman: podman:
frigate: | frigate: |
DOMAIN_NAME=$DOMAIN_NAME DOMAIN_NAME="$DOMAIN_NAME"
FRIGATE_MQTT_USER=$HOME_ASSISTANT_MQTT_USER FRIGATE_MQTT_USER="$HOME_ASSISTANT_MQTT_USER"
FRIGATE_MQTT_PASSWORD=$HOME_ASSISTANT_MQTT_PASSWORD FRIGATE_MQTT_PASSWORD="$HOME_ASSISTANT_MQTT_PASSWORD"
gitea: | gitea: |
DOMAIN_NAME=$DOMAIN_NAME DOMAIN_NAME="$DOMAIN_NAME"
DB_NAME=$GITEA_DB_NAME DB_NAME="$GITEA_DB_NAME"
DB_USERNAME=$GITEA_DB_USERNAME DB_USERNAME="$GITEA_DB_USERNAME"
DB_PASSWORD=$GITEA_DB_PASSWORD DB_PASSWORD="$GITEA_DB_PASSWORD"
POSTGRES_HOST=gitea-database POSTGRES_HOST="gitea-database"
POSTGRES_PORT=5432 POSTGRES_PORT=5432
home_assistant: | home_assistant: |
DOMAIN_NAME=$DOMAIN_NAME DOMAIN_NAME="$DOMAIN_NAME"
HOME_ASSISTANT_MQTT_USER=$HOME_ASSISTANT_MQTT_USER HOME_ASSISTANT_MQTT_USER="$HOME_ASSISTANT_MQTT_USER"
HOME_ASSISTANT_MQTT_PASSWORD=$HOME_ASSISTANT_MQTT_PASSWORD HOME_ASSISTANT_MQTT_PASSWORD="$HOME_ASSISTANT_MQTT_PASSWORD"
immich: | immich: |
DOMAIN_NAME=$DOMAIN_NAME DOMAIN_NAME="$DOMAIN_NAME"
DB_DATABASE_NAME=$IMMICH_DB_NAME DB_DATABASE_NAME="$IMMICH_DB_NAME"
DB_USERNAME=$IMMICH_DB_USERNAME DB_USERNAME="$IMMICH_DB_USERNAME"
DB_PASSWORD=$IMMICH_DB_PASSWORD DB_PASSWORD="$IMMICH_DB_PASSWORD"
IMMICH_VERSION=release IMMICH_VERSION="release"
IMMICH_TRUSTED_PROXIES=172.16.50.253 IMMICH_TRUSTED_PROXIES=172.16.50.253
REDIS_HOSTNAME=immich-redis REDIS_HOSTNAME="immich-redis"
DB_HOSTNAME=immich-database DB_HOSTNAME="immich-database"
UPLOAD_LOCATION=/mnt/data/immich UPLOAD_LOCATION=/mnt/data/immich
DB_DATA_LOCATION=/mnt/config/immich/database DB_DATA_LOCATION=/mnt/config/immich/database
TZ=Europe/Paris TZ="Europe/Paris"
it_tools: | it_tools: |
DOMAIN_NAME=$DOMAIN_NAME DOMAIN_NAME="$DOMAIN_NAME"
nextcloud: | nextcloud: |
DOMAIN_NAME=$DOMAIN_NAME DOMAIN_NAME="$DOMAIN_NAME"
NEXTCLOUD_ENABLE_DRI_DEVICE=$TARGET_GRAPHICS NEXTCLOUD_ENABLE_DRI_DEVICE=$TARGET_GRAPHICS
passbolt: | passbolt: |
DOMAIN_NAME=$DOMAIN_NAME DOMAIN_NAME="$DOMAIN_NAME"
PASSBOLT_MYSQL_DATABASE=$PASSBOLT_DB_NAME PASSBOLT_MYSQL_DATABASE="$PASSBOLT_DB_NAME"
PASSBOLT_MYSQL_USER=$PASSBOLT_DB_USERNAME PASSBOLT_MYSQL_USER="$PASSBOLT_DB_USERNAME"
PASSBOLT_MYSQL_PASSWORD=$PASSBOLT_DB_PASSWORD PASSBOLT_MYSQL_PASSWORD="$PASSBOLT_DB_PASSWORD"
SENDER_EMAIL_ADDRESS=$SENDER_EMAIL_ADDRESS SENDER_EMAIL_ADDRESS="$SENDER_EMAIL_ADDRESS"
SENDER_EMAIL_ADDRESS_PASSWORD=$SENDER_EMAIL_ADDRESS_PASSWORD SENDER_EMAIL_ADDRESS_PASSWORD="$SENDER_EMAIL_ADDRESS_PASSWORD"
SENDER_EMAIL_DOMAIN=$SENDER_EMAIL_DOMAIN SENDER_EMAIL_DOMAIN="$SENDER_EMAIL_DOMAIN"
SENDER_EMAIL_PORT=$SENDER_EMAIL_PORT SENDER_EMAIL_PORT="$SENDER_EMAIL_PORT"
EMAIL_ADDRESS=$EMAIL_ADDRESS EMAIL_ADDRESS="$EMAIL_ADDRESS"
TZ=Europe/Paris TZ="Europe/Paris"
pi_hole: | pi_hole: |
DOMAIN_NAME=$DOMAIN_NAME DOMAIN_NAME="$DOMAIN_NAME"
HOME_ROUTER_SUBNET=$HOME_ROUTER_SUBNET HOME_ROUTER_SUBNET=$HOME_ROUTER_SUBNET
HOME_ROUTER_IP=$HOME_ROUTER_IP HOME_ROUTER_IP=$HOME_ROUTER_IP
HOME_SERVER_IP=$HOME_SERVER_IP HOME_SERVER_IP=$HOME_SERVER_IP
FTLCONF_webserver_api_password=$FTLCONF_WEBSERVER_PASSWORD FTLCONF_webserver_api_password="$FTLCONF_WEBSERVER_PASSWORD"
TZ=Europe/Paris TZ="Europe/Paris"
traefik: | traefik: |
DOMAIN_NAME=$DOMAIN_NAME DOMAIN_NAME="$DOMAIN_NAME"
CF_DNS_API_TOKEN=$CF_DNS_API_TOKEN CF_DNS_API_TOKEN="$CF_DNS_API_TOKEN"
disks: disks:
content-disk-1: $CONTENT_DISK_1_KEY content-disk-1: "$CONTENT_DISK_1_KEY"
content-disk-2: $CONTENT_DISK_2_KEY content-disk-2: "$CONTENT_DISK_2_KEY"
content-disk-3: $CONTENT_DISK_3_KEY content-disk-3: "$CONTENT_DISK_3_KEY"
content-disk-4: $CONTENT_DISK_4_KEY content-disk-4: "$CONTENT_DISK_4_KEY"
content-disk-5: $CONTENT_DISK_5_KEY content-disk-5: "$CONTENT_DISK_5_KEY"
content-disk-6: $CONTENT_DISK_6_KEY content-disk-6: "$CONTENT_DISK_6_KEY"
parity-disk-1: $PARITY_DISK_1_KEY parity-disk-1: "$PARITY_DISK_1_KEY"
parity-disk-2: $PARITY_DISK_2_KEY parity-disk-2: "$PARITY_DISK_2_KEY"
parity-disk-3: $PARITY_DISK_3_KEY parity-disk-3: "$PARITY_DISK_3_KEY"