draft AZ-PRM-1 config

2025-08-12 14:38:09 +02:00
parent 74a2a10393
commit 76750c062a
25 changed files with 1199 additions and 475 deletions
--- a/hosts/AZ-PRM-1/secrets.nix
+++ b/hosts/AZ-PRM-1/secrets.nix
@@ -0,0 +1,39 @@
+{
+  age = {
+    secrets = {
+      traefik-env = {
+        file = ../../secrets/traefik-env.age;
+      };
+      baserow-db = {
+        file = ../../secrets/baserow-db.age;
+      };
+      kestra-db = {
+        file = ../../secrets/kestra-db.age;
+      };
+      n8n-env = {
+        file = ../../secrets/n8n-env.age;
+      };
+      n8n-db = {
+        file = ../../secrets/n8n-db.age;
+      };
+      pg-cert = {
+        file = ../../secrets/server.crt.age;
+        owner = "root";
+        group = "postgres";
+        mode = "0640";
+      };
+      pg-key = {
+        file = ../../secrets/server.key.age;
+        owner = "root";
+        group = "postgres";
+        mode = "0600";
+      };
+      vaultwarden-env = {
+        file = ../../secrets/vaultwarden-env.age;
+      };
+      vaultwarden-db = {
+        file = ../../secrets/vaultwarden-db.age;
+      };
+    };
+  };
+}