encrypt

nixos/linux.nix

@@ -83,6 +83,11 @@ in {
       file = ./secrets/paperless.age;
       owner = "root";
     };
+
+    coldairnetworks = {
+      file = ./secrets/coldairnetworks.age;
+      owner = "root";
+    };
   };
 
   environment.systemPackages = [
@@ -384,8 +389,9 @@ in {
         volumes = [];
         environment = {
 		POSTMARK_SERVER_TOKEN = "e718a146-c590-4550-a750-a3b925056e29";
+		NODE_TLS_REJECT_UNAUTHORIZED = "0";
         };
-        environmentFiles = [ config.age.secrets.postmark.path ];
+        environmentFiles = [ config.age.secrets.postmark.path config.age.secrets.coldairnetworks.path ];
         ports = ["3012:8081"];
       };
 

nixos/secrets/coldairnetworks.age

@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 NFD/vg 5yGAA19rlzC2wSX7buivwDVu6AkSz0joS9oT7gcomGk
+YnrxzrNQ7rT6joa38uyz3JBs5NkZhqPOwCOyaTRHD5A
+--- jeqx+rAgrPkbdKhzNsiYjGhzq3nVTBfXfl4wKbkski8
+¯/ß‹P#¬!âŽ<C3A2>&Ïó`›àF¾rf9|œö~"~ð§m?+Õenw±D£KUXkS¢=;.“Ç£›m^!ÀÊ÷L6ßBä\˾†»„1S
+<@Óp˜­Ag¿ç˜Þ™–°°ÁwLãX…ŒÏHô¿ðôãA(%6‰/ñ©ïýt{ñªLO_‘˜üs<C3BC>!8Æ+œ“žaêX·/{fÜ›úÛ/¾çÜeNè&
+rbøÉ¡Ë
 ~2f’G$6HÈB•Æì•â<E280A2>µ‹B`ƒs+EžË4aGǺ5370-T£æJ°„‚
#m÷òe‘=˜÷

nixos/secrets/default.nix

@@ -30,4 +30,8 @@ in {
   # PAPERLESS_ADMIN_PASSWORD=<password>
   # PAPERLESS_ADMIN_EMAIL=peterson@sent.com
   "./paperless.age".publicKeys = [mainframePublicKey];
+
+  # DATABASE_URL=<supabase postgres dsn>
+  # BETTER_AUTH_SECRET=<secret>
+  "./coldairnetworks.age".publicKeys = [mainframePublicKey];
 }