aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorEuAndreh <eu@euandre.org>2023-05-23 10:54:55 -0300
committerEuAndreh <eu@euandre.org>2023-05-23 11:03:46 -0300
commitdc815b998b212247c5c697e2de7fecbd8745a0b2 (patch)
treeb40d398f94219c02cde450bc3ca251d61dd83ad3
parentbackup.sh: Add -x flag (diff)
downloadtoph-dc815b998b212247c5c697e2de7fecbd8745a0b2.tar.gz
toph-dc815b998b212247c5c697e2de7fecbd8745a0b2.tar.xz
src/secrets/nginx.conf.txt.gpg: Add private nginx config, and include it in system.scm
Notes
See CI logs with: git notes --ref=refs/notes/ci-logs show dc815b998b212247c5c697e2de7fecbd8745a0b2 git notes --ref=refs/notes/ci-data show dc815b998b212247c5c697e2de7fecbd8745a0b2 Exit status: 0 Duration: 25
-rw-r--r--Makefile1
-rw-r--r--src/infrastructure/guix/system.scm1
-rw-r--r--src/secrets/nginx.conf.txt.gpg18
3 files changed, 20 insertions, 0 deletions
diff --git a/Makefile b/Makefile
index 23b2359..657c9a3 100644
--- a/Makefile
+++ b/Makefile
@@ -73,6 +73,7 @@ public: \
prod-secrets.txt.gpg = \
+ src/secrets/nginx.conf.txt.gpg \
src/secrets/borg-passphrase.txt.gpg \
src/secrets/root@euandre.org.id_rsa.txt.gpg
prod-secrets.txt = $(prod-secrets.txt.gpg:.gpg=)
diff --git a/src/infrastructure/guix/system.scm b/src/infrastructure/guix/system.scm
index 831e58f..57c662c 100644
--- a/src/infrastructure/guix/system.scm
+++ b/src/infrastructure/guix/system.scm
@@ -410,6 +410,7 @@
"#)))))
(raw-content
'(#"-
+ include /opt/secrets/nginx.conf.txt;
charset utf-8;
autoindex on;
add_header Strict-Transport-Security 'max-age=86400; includeSubdomains' always;
diff --git a/src/secrets/nginx.conf.txt.gpg b/src/secrets/nginx.conf.txt.gpg
new file mode 100644
index 0000000..c510b82
--- /dev/null
+++ b/src/secrets/nginx.conf.txt.gpg
@@ -0,0 +1,18 @@
+-----BEGIN PGP MESSAGE-----
+
+hQIMAxJMwbOrBV1aARAA5aqCUVK8gjUmwVrnPvXuiQ7RqQJSH+cQ7OjVHWOUOyOY
+DCorLcuEGvfNIlb4uTTBx4zPwh1Itfp0r9efAh/YC/+VqbyXLfxdHeJbZc4sg1Uq
+3kc2n8ZwZsDpRyv0ZhP/y9rkqbHsK2MUUXPXgq6Yj6lu8QBSH389+OjkfgXyc4C8
+1TkCQif058SEGf23jTnSZEf58Q2huJIW8+TBJPdAhDvPpGzCHlP/wvN0WeikUD8M
+lnWGf+nkfoMZkLQnnQ3tsrkObpnTaBk7iHQQtHH7X2S3ps6wmdXgMj/ueBTyOXw0
+N8EZP0YWl9cHWRMwuZ66etag+Xiz83XayKF2CxwlSpMt3DN2sW+VcFTI4xl8/tfW
+pew4ezpBjS3SQ4GvX36+Lvm/7MNcX8NmVZEXcqpv2iJwxTFNwP6mDtdRdCZqxZsI
+aADE96bB37rjaPjdih0STB5s2pfwl3uw4NXGHZyNRZKiUWapv3cmNzjGDLulU8gV
+ZM/VMBvS8n0Imqy/oQ+sNOHm+uLjO3PDYrEv1AJeqmm0LGpQmrTdeYFMZfZqnbAG
+HL6Hov3JbGAQ1zqvzWrgSsJVg7wy7VSNjIgZ1sfbYTHaK4zwH93ZeeWqBKvl+OdJ
+lDqm032zxAkmH46Cka6+ON0Vi8SIeh2TbacPoV8NiOQTBwZY9xBMFg2BJE18IbDS
+fwEpWZzOlovfSElkEVHg3nv/q8q886dtL50lkShxInz65mDPmTF5U/IxyZec3/VP
+TiaXbqWiSKPo+IXdA4e6aJOtczx4fLc4s573qnKIHpS+XDTmU8XhKzjgQ+ypHmIR
+8Qb10KyXtVZbjZ0Rt2nav2FAygwvqdgqyBaBDnjO474=
+=2UUj
+-----END PGP MESSAGE-----