zuckerberg/nix-config
zuckerberg/nix-config
1
0
Fork 0
Code Issues Pull Requests Actions Activity

load pia secret for container

Browse Source
This commit is contained in:
zuckerberg 2021-06-22 21:12:42 -04:00
parent 0cbcc30aa1
commit cfaefc1536
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
machines/mitty/configuration.nix
View File

@ -35,6 +35,12 @@
isReadOnly = false; isReadOnly = false;
}; };
}; };
bindMounts = {
"/run/secrets" = {
hostPath = "/run/secrets";
isReadOnly = true;
};
};
enableTun = true; enableTun = true;
privateNetwork = true; privateNetwork = true;
hostAddress = "172.16.100.1"; hostAddress = "172.16.100.1";
@ -105,6 +111,8 @@
proxyPass = "http://172.16.100.2:9117"; proxyPass = "http://172.16.100.2:9117";
}; };
}; };
# load the secret on behalf of the container
age.secrets."pia-login.conf".file = ../../secrets/pia-login.conf;
networking.nat.enable = true; networking.nat.enable = true;
networking.nat.internalInterfaces = [ "ve-jellyfin" ]; networking.nat.internalInterfaces = [ "ve-jellyfin" ];