Discourse

modules/discourse.nix

+{ config, pkgs, lib, ... }: {
+
+  age.secrets."net.horizon-haskell.discourse.passwordFile.age".file = ../secrets/net.horizon-haskell.discourse.passwordFile.age;
+  age.secrets."net.horizon-haskell.discourse.passwordFile.age".owner = "discourse";
+  age.secrets."net.horizon-haskell.discourse.passwordFile.age".group = "discourse";
+  age.secrets."net.horizon-haskell.discourse.passwordFile.age".mode = "400";
+
+  age.secrets."net.horizon-haskell.discourse.secretKeyBaseFile.age".file = ../secrets/net.horizon-haskell.discourse.secretKeyBaseFile.age;
+  age.secrets."net.horizon-haskell.discourse.secretKeyBaseFile.age".owner = "discourse";
+  age.secrets."net.horizon-haskell.discourse.secretKeyBaseFile.age".group = "discourse";
+  age.secrets."net.horizon-haskell.discourse.secretKeyBaseFile.age".mode = "400";
+
+  services.discourse = {
+    enable = true;
+    hostname = "discourse.horizon-haskell.net";
+    admin = {
+      email = "admin@horizon-haskell.net";
+      username = "admin";
+      fullName = "admin";
+      passwordFile = config.age.secrets."net.horizon-haskell.discourse.passwordFile.age".path;
+    };
+    secretKeyBaseFile = config.age.secrets."net.horizon-haskell.discourse.secretKeyBaseFile.age".path;
+    database.ignorePostgresqlVersion = true;
+  };
+
+  security.acme = {
+    email = "acme@horizon-haskell.net";
+    acceptTerms = true;
+  };
+}

secrets/net.horizon-haskell.discourse.passwordFile.age

+age-encryption.org/v1
+-> ssh-ed25519 rbjviQ oZzec7uBfnESzQ/BbhjiEX4y1QAsDAliSoAsX5BUJHI
+eyi9BKSPWzL0WvnV1z6wB30deT4K8qJ9cGmFThpokL4
+-> ssh-ed25519 VTogeA hWKE8I+2SDVOSh3/qDWuh21xUkdVlgZyIjV7pvycmjs
+cnOFQZhlvglPLPX9LKQxYPb/XOttOe1aSnCMEWlou74
+-> ssh-ed25519 F1rVpg i1WAqvMoc8/f3VMtjcuEZs24Y6qWcc0GVcZy81V57VE
+ALsHqHFI555VaxcZlrolGQew0VNbcfNZAdK12Rz/nzs
+-> a-grease rs7uWi pN <jH,B
+5Ckz+pbVxEscgj3TKUjL0X4aSX8E2F92iUe2vkw9/eTR
+--- sboQOHYwiY2MCYQviLSdl1o4iz5PZdMrtFcm4Jg2Ojo
+7='>YcRM
+!qTug5jVƨzg\&;!2r
\ No newline at end of file

secrets/net.horizon-haskell.gitlab.dbFile.age

-age-encryption.org/v1
--> ssh-ed25519 G6WuUQ CGTepZfj4jdK5kjlq6Uwy7WJ0DERBSPcDt6UTjoXwmc
-8Sp6Iw6V2Dt0R5f+9BHksK846LnBkKeV8BSaOosP5jM
--> ssh-ed25519 mh+RZw iR4pncUcmhRvnmRZGGi67gM7Ux1sr8NuWCtaNEKobBs
-7mEL4ETqr9tD+/3lHheLQ4TZyGK9em8kuSsFRLtmDew
--> Z!\>-grease
-ETbFbw
---- /1DeDOn+rrV86e8OWyH01WcwKmLYuYbF+8Da/3j3WM4
-Yl]F4ip&;L~i5ܑIxVYIp-$;z^3-Yd锧
Z?5C#?!TC4l1;b)$Q6&-YB\
0|
\ No newline at end of file