darman/homelab
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Trim comments across configs and services

Browse Source 
Shorten verbose multi-paragraph comments to essentials, and drop a
stale claim in common.nix that jupiter kept its own copy of the base
config (it now imports common.nix directly).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This commit is contained in:
darman
2026-07-20 06:04:27 +02:00
co-authored by Claude Sonnet 5
parent c4702b577c
commit 4679afa505
14 changed files with 71 additions and 116 deletions
Download Patch File Download Diff File Expand all files Collapse all files
services/zitadel.nix
+6 -8
View File
@@ -2,15 +2,13 @@
# Zitadel — self-hosted identity/OIDC provider. Local Postgres (peer-authed
# over the unix socket, no password anywhere) since Zitadel is latency-
# sensitive to its DB. TLS is terminated at Caddy (see the host's
# configuration.nix for the public vhost); Zitadel itself only listens on
# localhost:8080.
# sensitive to its DB. TLS terminates at Caddy; Zitadel itself only listens
# on localhost:8080.
#
# The "zitadel" Postgres role doubles as both Database.postgres.User (normal
# runtime queries) and .Admin (bootstrap: creates the db/extensions on first
# start) — granted createdb+createrole instead of using the real postgres
# superuser, matching Zitadel's own guidance to keep bootstrap privileges
# scoped to a dedicated role.
# The "zitadel" Postgres role doubles as both User (runtime queries) and
# Admin (bootstrap: creates db/extensions on first start) — granted
# createdb+createrole rather than using the postgres superuser, per
# Zitadel's own guidance to scope bootstrap privileges to a dedicated role.
#
# Needs, wired via sops in the host's secrets.nix:
# - masterKeyFile: 32 raw bytes, e.g. `openssl rand -hex 16`