diff --git a/secrets/mcp.yaml b/secrets/mcp.yaml index 6df85f8..0112c4e 100644 --- a/secrets/mcp.yaml +++ b/secrets/mcp.yaml @@ -29,6 +29,10 @@ immich: database: ENC[AES256_GCM,data:1fjOQsLZcq/T+r+AkzomWwCQWw==,iv:c4pn2rC+3xkxLJ7uAdhnTE6zVTRQkfuKK3tjUyDhfAw=,tag:kvk7DOv6X/+RDxfPxVak7w==,type:str] searxng: secret: ENC[AES256_GCM,data:Dg/6TAKY7fyhw8LJ6E4ZYN85zs/ItcetCYHETFbOMvHkGsflE3ngQNyIPVY=,iv:z3y2vXjJWCGhXYjfj963Nhiw6K0i/M8bVvwO/L3zgzk=,tag:yO9NtYMLjSazHQmToSR3fA==,type:str] +wargame-vods: + db: + password: ENC[AES256_GCM,data:4Vl2Jd80bu3gVKDN7gINo8rbui6x3zxPvYEHf6GBiJDQdmRt8od/5yw4S/8=,iv:ZLdp3j0+8vLluNssXlV52XIJMczhai+6zcHsRwDwGPM=,tag:rjbp9cFbj3EFxnUZQO/QYg==,type:str] + admin-token: ENC[AES256_GCM,data:xxec5YDtWW7VpV+POtfhfhHG45ebCdNuD6PyHExyp0H9Ef/edTCgJtnPYWM=,iv:bLidEo0L1vP8IRtcdZ4Bcw4chHErCUHH31xQS7cFk3g=,tag:AJ9fb6xo8w41FOWu2fHHgQ==,type:str] sops: age: - enc: | @@ -58,7 +62,7 @@ sops: dvKJPDYvGb/8JXSkZNkLlWvHEVnsAJ1mJFb1idenYzeQvJlsX07rYA== -----END AGE ENCRYPTED FILE----- recipient: age1jrk4h7x4qzhr6z5m4d099mlfyjc4n5n9s52r4gfsdz0slnqlqa9sss735v - lastmodified: "2026-07-21T02:59:55Z" - mac: ENC[AES256_GCM,data:0v26ceptPmbVdee70AOMdZHOarPDRuxKi+QP3Ci+wyJQJdQVriKKUnN3Zv/MKjZ3Sg2M/C5XtsdhGwXJpPsfwdDhWIRip6UYWXIKkVyZcxOs6E2zlK3xCAk/eTKhAsmL7Y6yFV+hpYwlT/hFnzOHXt1xbxGVJiKnO98OH0+6hnk=,iv:f94wd227bM0SniUuY+CFg2deEfITzUGTGwDA/WQJhms=,tag:M0r4Vg480wWWYPH3PBB7qg==,type:str] + lastmodified: "2026-08-14T23:11:14Z" + mac: ENC[AES256_GCM,data:nto4tN0VUAG8cjssn9jINYQ+lwmZHSkAquFD1WUx6cRz4L7U0eFBukkhX9P9n3jWFBuFdm/VnF8asRaIZNuWa5X/LBjPZ6rqqcm+sm8tn9SLGiF0QOMOoTXDQCaJYmbwfa1iyj3Dvs2UqXpUZG3I0SM+dTKoSNjRIRx04zkSgak=,iv:J0XOwqjX74DCs+wGn3V1kbvrPhLwrHywWRJoccuCceY=,tag:jfxWSf1xD72ll1itPy2Dxw==,type:str] unencrypted_suffix: _unencrypted version: 3.13.1 diff --git a/system/hosts/mcp/containers/blazestar.net/default.nix b/system/hosts/mcp/containers/blazestar.net/default.nix index 33b2aa0..44bf261 100644 --- a/system/hosts/mcp/containers/blazestar.net/default.nix +++ b/system/hosts/mcp/containers/blazestar.net/default.nix @@ -3,5 +3,6 @@ imports = [ ./chat.nix ./uptime.nix + ./wargame-vods.nix ]; } diff --git a/system/hosts/mcp/containers/blazestar.net/wargame-vods.nix b/system/hosts/mcp/containers/blazestar.net/wargame-vods.nix new file mode 100644 index 0000000..44d8064 --- /dev/null +++ b/system/hosts/mcp/containers/blazestar.net/wargame-vods.nix @@ -0,0 +1,39 @@ +{ config, pkgs, ... }: +let + inherit (import ../lib.nix config) blazestar; + db_password = "wargame-vods/db/password"; + admin_token = "wargame-vods/admin-token"; +in +{ + sops = { + secrets = { + "${db_password}" = { }; + "${admin_token}" = { }; + }; + templates."wargame-vods.env" = { + mode = "0400"; + content = '' + ADMIN_TOKEN=${config.sops.placeholder."${admin_token}"} + PGHOST=db + PGPORT=5432 + PGUSER=wargame-vods + PGPASS=${config.sops.placeholder."${db_password}"} + PGDATABASE=wargame-vods + STATIC_DIR=/app/static + PORT=8081 + SSL_CERT_FILE=${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt + ''; + }; + }; + virtualisation.web-containers.containers.wargame-vods = { + image = "docker.havenisms.com/apps/wargame-vods"; + hostname = "vods"; + domain = blazestar; + port = 8081; + volumes = [ ]; + dependsOn = [ "db" ]; + environmentFiles = [ + config.sops.templates."wargame-vods.env".path + ]; + }; +}