Global: finally figured out how sops works but cloudflared is a bitch

This commit is contained in:
blahai 2024-11-13 21:08:46 +02:00
parent f62fda8150
commit bd8c46cd26
No known key found for this signature in database
4 changed files with 6 additions and 35 deletions

View file

@ -1,28 +0,0 @@
{ lib, config, pkgs, inputs, ... }:
{
imports = [
../../../secrets/secrets.nix
];
services.cloudflared = {
enable = true;
};
users.users.cloudflared = {
group = "cloudflared";
isSystemUser = true;
};
users.groups.cloudflared = { };
systemd.services.my_tunnel = {
wantedBy = [ "multi-user.target" ];
after = [ "network-online.target" "systemd-resolved.service" ];
serviceConfig = {
ExecStart = "${pkgs.cloudflared}/bin/cloudflared tunnel --no-autoupdate run --token=${sops.secrets.cloudflared.nyx.token}";
Restart = "always";
User = "cloudflared";
Group = "cloudflared";
};
};
}

View file

@ -1,7 +1,6 @@
{ ... }:
{
imports = [
# ./cloudflared.nix
./vpn.nix
./pipewire.nix
];