🔒 (paperless): secret and port fix

elythh · Sep 28, 2024 · 7fdf750 · 7fdf750
1 parent 7ecf61a
commit 7fdf750
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 3 deletions.
diff --git a/modules/nixos/opt/services/paperless.nix b/modules/nixos/opt/services/paperless.nix
@@ -19,7 +19,7 @@ in
     };
     port = mkOption {
       type = types.int;
-      default = 7777;
+      default = 6666;
     };
   };
 
@@ -30,6 +30,7 @@ in
         enable = true;
         inherit (cfg) port;
         address = cfg.host;
+        passwordFile = config.sops.secrets.paperless_password.path;
       };
       cloudflared.tunnels = {
         "9f52eb17-9286-4b74-8526-28094e48f79f" = {
@@ -43,5 +44,6 @@ in
         };
       };
     };
+    sops.secrets.paperless_password = { };
   };
 }
diff --git a/secrets/mithrix/secrets.yaml b/secrets/mithrix/secrets.yaml
@@ -1,6 +1,7 @@
 your_spotify_client_id_env: ENC[AES256_GCM,data:3pv9ZNpK7Aq0hiPV4/Aa5f8kwMdYJrSEWabKjq+Kn4Q=,iv:sw+JmH8N598zlrx+W47JQ3mtTdf7oZdXurtouI6mO14=,tag:ftmddv8PcwTfDcmOliHSoA==,type:str]
 your_spotify_client_secret: ENC[AES256_GCM,data:q7dieDgWx3TSZ3a66dD/aHVGfp69GYATbKm11gIussM=,iv:emlE0XHi04aItkawGBXS1UITaO3+mK4zZOYaZUDFF8k=,tag:hDWKctyrSmfoS+k35qVByA==,type:str]
 cloudflared-tunnel-creds: ENC[AES256_GCM,data:C8F6TNRevVnc/OR0OJFs4BtTEYZapoDr6/P5gvcBZreQdZ1OzlQe7EOCHozq/AhgpEe1VMioB1KVwCs3+dRTlp9KWesFpfUPzXO772f48Zpf1a0KlZeKz8FB5WM0NTnHs5ndXUGihPmQO/WvF/bKNS1KV7ib8RFmN+w2mpbqwvQ71c68FDGFgSC+KFXROMU3VMNJrgWP6+G391KFgpySPBWN,iv:/bJ52RKcPbQTxiLvqZU4YidpwEajcqJy44/3x3K2RYU=,tag:I2KAt2FAwyinXWkgKfhbIA==,type:str]
+paperless_password: ENC[AES256_GCM,data:MU5/I81Yd3bt8UYriiY=,iv:6B3L0gggcB/tZzG7aDBBLjPioqWLl0Ej246+mfiA5RI=,tag:tSBvhno6wM8eUj/K58DlEA==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -16,8 +17,8 @@ sops:
             N1NOYkhIbTRZakZWVzFPRUJRUVlKVGMK1rGjG9ssl2nk37JwdgRniC5/vtI+d+em
             nmDTexkjOQsLyVLckzZ5TDorg891F2Pa4L3a3FBJUa2sTFJjxv9Xww==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-09-28T13:19:24Z"
-    mac: ENC[AES256_GCM,data:H/1QXKsmex54byDx5gUEY9TuJMmulFcj8BVxOykxUmt2KNOVaZhUrVErwZCKec/1l6b3pE4d+pZx3ffqjKgpVcLNdpNLT6j9IwPTlQ5IBEex9WO+GDK/yQSYdGKH9oXYNSj85OYo2BgAHv6IQOxt+P/MqLHdfV+vU40PQk88KPU=,iv:TDR9DiMb3qmdb1WefrCcsiG2IoiUTFGmCl1jUSLJMrc=,tag:LVC9Q5xtwDJrzGLLqCqUQg==,type:str]
+    lastmodified: "2024-09-28T19:59:01Z"
+    mac: ENC[AES256_GCM,data:0YT+yrsi+ZsZOXJGdB69g+KiqY69TRZjlOLpxyJ202kY3yOO0NqiFrR2QnSa9FxdF+HITfJI8FgPWlgwYFfw39tP/JTZ/TWnu4fLrZJurm+iY8g8YI7jTi5Lqn/Fn60TPOM297/IIUzjGSUwzZJ1mPz5/xUy26Tz5UGQgCEjYv4=,iv:Ko5AU+DZgBGvbvsYBW+Pxq8NIyLsLVv7SDhwATKNFD4=,tag:0pyNE89o7zYdV3hSZx8ZWw==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.9.0