Periodic/system-config
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Sets up Wargame VODs for public access.

Browse Source
This commit is contained in:
Periodic
2026-09-01 19:29:33 -07:00
parent 0609214629
commit b460a7d3e0
2 changed files with 12 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
secrets/mcp.yaml
+4 -3
View File
@@ -33,6 +33,7 @@ wargame-vods:
db: db:
password: ENC[AES256_GCM,data:4Vl2Jd80bu3gVKDN7gINo8rbui6x3zxPvYEHf6GBiJDQdmRt8od/5yw4S/8=,iv:ZLdp3j0+8vLluNssXlV52XIJMczhai+6zcHsRwDwGPM=,tag:rjbp9cFbj3EFxnUZQO/QYg==,type:str] password: ENC[AES256_GCM,data:4Vl2Jd80bu3gVKDN7gINo8rbui6x3zxPvYEHf6GBiJDQdmRt8od/5yw4S/8=,iv:ZLdp3j0+8vLluNssXlV52XIJMczhai+6zcHsRwDwGPM=,tag:rjbp9cFbj3EFxnUZQO/QYg==,type:str]
admin-token: ENC[AES256_GCM,data:xxec5YDtWW7VpV+POtfhfhHG45ebCdNuD6PyHExyp0H9Ef/edTCgJtnPYWM=,iv:bLidEo0L1vP8IRtcdZ4Bcw4chHErCUHH31xQS7cFk3g=,tag:AJ9fb6xo8w41FOWu2fHHgQ==,type:str] admin-token: ENC[AES256_GCM,data:xxec5YDtWW7VpV+POtfhfhHG45ebCdNuD6PyHExyp0H9Ef/edTCgJtnPYWM=,iv:bLidEo0L1vP8IRtcdZ4Bcw4chHErCUHH31xQS7cFk3g=,tag:AJ9fb6xo8w41FOWu2fHHgQ==,type:str]
youtube-api-key: ENC[AES256_GCM,data:9W6+QK52mlTPh55ZqHXq020IpPbwbr9+Qzqhi6u96NrnRJEEVr+Z,iv:s3g2kGg2xPWD6/BuQxJ7Eqbm5HpatQbkF6PxuKufxro=,tag:1vvC8STNTX3+e5hLQTJglQ==,type:str]
sops: sops:
age: age:
- enc: | - enc: |
@@ -62,7 +63,7 @@ sops:
dvKJPDYvGb/8JXSkZNkLlWvHEVnsAJ1mJFb1idenYzeQvJlsX07rYA== dvKJPDYvGb/8JXSkZNkLlWvHEVnsAJ1mJFb1idenYzeQvJlsX07rYA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
recipient: age1jrk4h7x4qzhr6z5m4d099mlfyjc4n5n9s52r4gfsdz0slnqlqa9sss735v recipient: age1jrk4h7x4qzhr6z5m4d099mlfyjc4n5n9s52r4gfsdz0slnqlqa9sss735v
lastmodified: "2026-08-14T23:11:14Z" lastmodified: "2026-08-17T01:55:47Z"
mac: ENC[AES256_GCM,data:nto4tN0VUAG8cjssn9jINYQ+lwmZHSkAquFD1WUx6cRz4L7U0eFBukkhX9P9n3jWFBuFdm/VnF8asRaIZNuWa5X/LBjPZ6rqqcm+sm8tn9SLGiF0QOMOoTXDQCaJYmbwfa1iyj3Dvs2UqXpUZG3I0SM+dTKoSNjRIRx04zkSgak=,iv:J0XOwqjX74DCs+wGn3V1kbvrPhLwrHywWRJoccuCceY=,tag:jfxWSf1xD72ll1itPy2Dxw==,type:str] mac: ENC[AES256_GCM,data:uR1BHCZi0O0KQUwVauev4CmUwAvj7xABsnQR+3FRfTJK3mcnm2TR+GabQ9F8YyTDo86fK8pYLl4iki766LUy78QJBFMXCKmB7shx5kWIDKWcSU2xlkrPbXSZmQr0Hh5x46YaZbd9UO8xabUdy3p3Vu282V192HWFXsGBQ3T1mvY=,iv:lp2ca+4vd7lIjibaTBBxy/3NmdWenaZrE2dWZzrfrBM=,tag:cJWZT7BgdVJXjwJh/4USuw==,type:str]
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.13.1 version: 3.13.2
system/hosts/mcp/containers/blazestar.net/wargame-vods.nix
+8 -2
View File
@@ -1,14 +1,16 @@
{ config, pkgs, ... }: { config, ... }:
let let
inherit (import ../lib.nix config) blazestar; inherit (import ../lib.nix config) blazestar;
db_password = "wargame-vods/db/password"; db_password = "wargame-vods/db/password";
admin_token = "wargame-vods/admin-token"; admin_token = "wargame-vods/admin-token";
youtube_api_key = "wargame-vods/youtube-api-key";
in in
{ {
sops = { sops = {
secrets = { secrets = {
"${db_password}" = { }; "${db_password}" = { };
"${admin_token}" = { }; "${admin_token}" = { };
"${youtube_api_key}" = { };
}; };
templates."wargame-vods.env" = { templates."wargame-vods.env" = {
mode = "0400"; mode = "0400";
@@ -21,8 +23,11 @@ in
PGDATABASE=wargame-vods PGDATABASE=wargame-vods
STATIC_DIR=/app/static STATIC_DIR=/app/static
PORT=8081 PORT=8081
SSL_CERT_FILE=${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt SSL_CERT_FILE=/etc/ssl/certs/ca-bundle.crt
CORS_ORIGINS=https://vods.blazestar.net
YOUTUBE_API_KEY=${config.sops.placeholder."${youtube_api_key}"}
''; '';
restartUnits = [ "podman-wargame-vods.service" ];
}; };
}; };
virtualisation.web-containers.containers.wargame-vods = { virtualisation.web-containers.containers.wargame-vods = {
@@ -30,6 +35,7 @@ in
hostname = "vods"; hostname = "vods";
domain = blazestar; domain = blazestar;
port = 8081; port = 8081;
public = true;
volumes = [ ]; volumes = [ ];
dependsOn = [ "db" ]; dependsOn = [ "db" ];
environmentFiles = [ environmentFiles = [