Infini-DL360/secrets: only use hydra group where necessary

This commit is contained in:
Infinidoge 2025-02-18 21:54:34 -05:00
parent 944cea94af
commit aab0006055
Signed by: Infinidoge
SSH key fingerprint: SHA256:EMoPe5e2dO0gEvtBb2xkZTz5dkyL0rBmuiGTKG5s96E
2 changed files with 3 additions and 1 deletions

View file

@ -6,6 +6,8 @@ in
age.secrets = { age.secrets = {
authentik-ldap.rekeyFile = ./authentik-ldap.age; authentik-ldap.rekeyFile = ./authentik-ldap.age;
authentik.rekeyFile = ./authentik.age; authentik.rekeyFile = ./authentik.age;
binary-cache-private-key.group = "hydra";
binary-cache-private-key.mode = "440";
freshrss = withOwnerGroup "freshrss" ./freshrss.age; freshrss = withOwnerGroup "freshrss" ./freshrss.age;
hedgedoc = withOwnerGroup "hedgedoc" ./hedgedoc.age; hedgedoc = withOwnerGroup "hedgedoc" ./hedgedoc.age;
hydra = withGroup "hydra" ./hydra.age; hydra = withGroup "hydra" ./hydra.age;

View file

@ -21,7 +21,7 @@ in
age.secrets = { age.secrets = {
borg-ssh-key.rekeyFile = ./borg-ssh-key.age; borg-ssh-key.rekeyFile = ./borg-ssh-key.age;
borg-password = withGroup "borg" ./borg-password.age; borg-password = withGroup "borg" ./borg-password.age;
binary-cache-private-key = withGroup "hydra" ./binary-cache-private-key.age; binary-cache-private-key.rekeyFile = ./binary-cache-private-key.age;
smtp-noreply = withGroup "smtp" ./smtp-noreply.age; smtp-noreply = withGroup "smtp" ./smtp-noreply.age;
dns-cloudflare.rekeyFile = ./dns-cloudflare.age; dns-cloudflare.rekeyFile = ./dns-cloudflare.age;
}; };