darman/homelab
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Drop stale webhook-relay lineage leftovers (superseded on master)

Browse Source
This commit is contained in:
luna
2026-09-18 23:19:06 +00:00
parent ee0a2f39e9
commit a8e5c200dc
2 changed files with 5 additions and 57 deletions
Download Patch File Download Diff File Expand all files Collapse all files
hosts/jupiter/secrets.nix
+5 -9
View File
@@ -43,15 +43,11 @@
owner = "gitea";
};
# SABnzbd credentials (web UI login, API keys, eweka.nl usenet server) —
# migrated off the reused ini in services/media/sabnzbd.nix into
# services.sabnzbd.settings + secretValues. sabnzbd_api_key predates this
# migration (provisioned for mediamanager's future use, services/experimental/
# mediamanager.nix — not currently imported by any host); reused here as the
# same single source of truth rather than duplicating it.
# owner = sabnzbd: the module's preStart (replace-secret) runs as the
# service's own User=/Group=, and sops secrets default to root:root 0400 —
# without this, replace-secret gets Permission denied reading /run/secrets.
# SABnzbd credentials (web UI login, API keys, eweka.nl usenet server) for
# services/media/sabnzbd.nix; sabnzbd_api_key is shared with
# services/experimental/mediamanager.nix rather than duplicated.
# owner = sabnzbd because the module's preStart runs as that user, and sops secrets
# default to root:root 0400.
sops.secrets.sabnzbd_web_username.owner = "sabnzbd";
sops.secrets.sabnzbd_web_password.owner = "sabnzbd";
sops.secrets.sabnzbd_api_key.owner = "sabnzbd";