erik
22a3eee85b
pihole.toml is nix-managed read-only so 'pihole setpassword' fails. pihole-FTL reads FTLCONF_* env vars (override the toml) — render an env file from the sops secret pihole_webpassword and feed it via EnvironmentFile. Password stays out of repo/store. VERIFIED in VM: FTLCONF_webserver_api_password -> API login works.
27 lines
1.9 KiB
YAML
27 lines
1.9 KiB
YAML
darman_password: ENC[AES256_GCM,data:Wc7y/5QPUxD4mxDGBp9V2k6YNrbmehbpcltInIBSGk70cdqxSUOjHZIL0hzPS4ijrXPnR9gwSZbc7EmgbLZ2K96SJtz9+upDAQVVUFfNx0o+SfGEu3ai3Qi7tKa+1N9wZQW/+6gQOAMAGQ==,iv:K/GrcQFtYWgQAtDlNVaYS5jUADYfX6rMSIUM9niRcWQ=,tag:9dbiRlIzAkm382Bkc6LfJA==,type:str]
|
|
pihole_webpassword: ENC[AES256_GCM,data:yTMUApkbGwa5SH7PRk8+,iv:Iev7y5T9igzMUUgo61X5fWRvqkKfC1hF7uj9U2FD7Vk=,tag:ym48IpvMjVRiqqMqTXxM+w==,type:str]
|
|
sops:
|
|
age:
|
|
- enc: |
|
|
-----BEGIN AGE ENCRYPTED FILE-----
|
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOQUdJRFBlYUYzWTFiaWJn
|
|
SS80UlJ0VWhhQmMzSWc3bkM3Q2NHNHJVT0ZFCmRDdnp5bzhCTHlTK2NseHRVc2Mw
|
|
OVl4QVdNclh5VXhoeGlsWXNLUkxUUE0KLS0tIE5jV1djL1FiTithVjZabTRHTzJ2
|
|
anR2d3V3TXA1L1RMcEtHZ0g3dTZ0dncKtzI9bsQEcuJb5PPuXMkNHOObdSmxxvWl
|
|
D3A1dJu2wnMV6TO5TNVAy9+jyp26RBkdkxoUqlChzBs0kl3/gmJNTA==
|
|
-----END AGE ENCRYPTED FILE-----
|
|
recipient: age1cekcqyf7073fsytcjxaa9dr9zwkmn4vjg36rv2tgxdglzfv4jvxqvcj6z2
|
|
- enc: |
|
|
-----BEGIN AGE ENCRYPTED FILE-----
|
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1UWhaT2tOdm02QWgyTkdB
|
|
Ry9XS0Q4U0dEdkhtbHZDVDNtcFRxcDhZOENrCkdmbjFvWUpzdnFEUTg3bjdXN3Rz
|
|
OXAxYUNGdDlxNjNaMlRZRjVFbDhVYjQKLS0tIHB0Z3RaOUJtZEVGTzlBSHRaQjBh
|
|
V0Yza1RVTmJTblBLZFkzZElwWTlmdncKCAiA6NdlpVJmuTbU1/rcTsB9UeGIQPlD
|
|
x6FfYadcRfqvSX60l6+TGdzq6xDpxLIZOJ8q19qZsAvB0in50HW5gg==
|
|
-----END AGE ENCRYPTED FILE-----
|
|
recipient: age1cpty7zrgnn6l97upq00w5wa8zcvnkxkdt2jvhlj97jh83exure4slha43t
|
|
lastmodified: "2026-07-13T20:37:38Z"
|
|
mac: ENC[AES256_GCM,data:Ho1TYZnaF/Ke5e7OPc4oLnt3yVZPysvfK3hRZ3pxiA0uOw8USoNUSmfqXxhekwYxc2Lb0ZHrhvj7ntnWWFjeiJfRjSg4Y/6zr8i9z6506twH54HzIbcUHHx7joQKM6kmG2YHE/xCVoeXKOVxchqwgyuwofsK6O0k3MiGIBfLcDA=,iv:qQEucNPSeWZ5o9+aVmmfniLq336X8tQqWShpKr9dYUY=,tag:tdgv1Pi8/cmCo9tEHeTo2A==,type:str]
|
|
unencrypted_suffix: _unencrypted
|
|
version: 3.13.1
|