diff --git a/files.nix b/files.nix index b3b2b74..37056f5 100644 --- a/files.nix +++ b/files.nix @@ -43,7 +43,7 @@ in echo 'CF_API_KEY=REPLACEME' > /var/lib/cloudflare/Credentials.ini echo 'CLOUDFLARE_DNS_API_TOKEN=REPLACEME' >> /var/lib/cloudflare/Credentials.ini echo 'CLOUDFLARE_ZONE_API_TOKEN=REPLACEME' >> /var/lib/cloudflare/Credentials.ini - ${sed} -i "s/REPLACEME/$(cat /etc/nixos/userdata/userdata.json | ${jq} -r '.cloudflare.apiKey')/g" /var/lib/cloudflare/Credentials.ini + ${sed} -i "s/REPLACEME/$(cat /etc/nixos/userdata/userdata.json | ${jq} -r '.dns.apiKey')/g" /var/lib/cloudflare/Credentials.ini chmod 0440 /var/lib/cloudflare/Credentials.ini chown nginx:acmerecievers /var/lib/cloudflare/Credentials.ini ''; @@ -56,8 +56,8 @@ in echo 'account = REPLACEME1' >> /root/.config/rclone/rclone.conf echo 'key = REPLACEME2' >> /root/.config/rclone/rclone.conf - ${sed} -i "s/REPLACEME1/$(cat /etc/nixos/userdata/userdata.json | ${jq} -r '.backblaze.accountId')/g" /root/.config/rclone/rclone.conf - ${sed} -i "s/REPLACEME2/$(cat /etc/nixos/userdata/userdata.json | ${jq} -r '.backblaze.accountKey')/g" /root/.config/rclone/rclone.conf + ${sed} -i "s/REPLACEME1/$(cat /etc/nixos/userdata/userdata.json | ${jq} -r '.backup.accountId')/g" /root/.config/rclone/rclone.conf + ${sed} -i "s/REPLACEME2/$(cat /etc/nixos/userdata/userdata.json | ${jq} -r '.backup.accountKey')/g" /root/.config/rclone/rclone.conf chmod 0400 /root/.config/rclone/rclone.conf chown root:root /root/.config/rclone/rclone.conf diff --git a/variables-module.nix b/variables-module.nix index 43bc7fd..1e1c01f 100644 --- a/variables-module.nix +++ b/variables-module.nix @@ -85,12 +85,24 @@ in ############# # Secrets # ############# - backblaze = { + dns = { + provider = mkOption { + description = "DNS provider that was defined at the initial setup process. Default is ClOUDFLARE"; + type = types.nullOr types.str; + }; + }; + backup = { bucket = mkOption { description = "Bucket name used for userdata backups"; type = types.nullOr types.str; }; }; + server = { + provider = mkOption { + description = "Server provider that was defined at the initial setup process. Default is HETZNER"; + type = types.nullOr types.str; + }; + }; ############## # Services # ############## diff --git a/variables.nix b/variables.nix index 6651999..bd7e3f0 100644 --- a/variables.nix +++ b/variables.nix @@ -18,8 +18,14 @@ in enableSwagger = lib.attrsets.attrByPath [ "api" "enableSwagger" ] false jsonData; skippedMigrations = lib.attrsets.attrByPath [ "api" "skippedMigrations" ] [ ] jsonData; }; - backblaze = { - bucket = lib.attrsets.attrByPath [ "backblaze" "bucket" ] "" jsonData; + dns = { + provider = lib.attrsets.attrByPath [ "dns" "provider" ] "CLOUDFLARE" jsonData; + }; + backup = { + bucket = lib.attrsets.attrByPath [ "backup" "bucket" ] (lib.attrsets.attrByPath [ "backblaze" "bucket" ] "" jsonData) jsonData; + }; + server = { + provider = lib.attrsets.attrByPath [ "server" "provider" ] "HETZNER" jsonData; }; bitwarden = { enable = lib.attrsets.attrByPath [ "bitwarden" "enable" ] false jsonData;