From a01d98a525eeadecf6ad3c2a9fa23da3eebf0163 Mon Sep 17 00:00:00 2001 From: NullBite Date: Thu, 8 Aug 2024 02:56:10 -0400 Subject: [PATCH] rpi4: setup anki sync server --- hosts/rpi4/services.nix | 16 +++++++++++++++ secrets/anki-user.age | 45 +++++++++++++++++++++++++++++++++++++++++ secrets/secrets.nix | 2 ++ 3 files changed, 63 insertions(+) create mode 100644 secrets/anki-user.age diff --git a/hosts/rpi4/services.nix b/hosts/rpi4/services.nix index 3acacbc..d9f7f4c 100644 --- a/hosts/rpi4/services.nix +++ b/hosts/rpi4/services.nix @@ -46,6 +46,10 @@ mode = "0750"; }; + age.secrets.anki = { + file = ../../secrets/anki-user.age; + }; + users.groups.secrets = {}; users.users.acme.extraGroups = [ "secrets" ]; @@ -237,6 +241,8 @@ "uptime.protogen.io" = mkReverseProxy 3001; "kuma.protogen.io".locations."/".return = "301 https://uptime.protogen.io"; + "anki.protogen.io" = mkReverseProxy config.services.anki-sync-server.port; + "trackmap.protogen.io" = let root = pkgs.modpacks.notlite-ctm-static; in { @@ -318,5 +324,15 @@ enable = true; port = 8087; }; + + services.anki-sync-server = { + enable = true; + users = [ + { + username = "nullbite"; + passwordFile = config.age.secrets.anki.path; + } + ]; + }; }; } diff --git a/secrets/anki-user.age b/secrets/anki-user.age new file mode 100644 index 0000000..f6bd16c --- /dev/null +++ b/secrets/anki-user.age @@ -0,0 +1,45 @@ +age-encryption.org/v1 +-> ssh-ed25519 YUrFgQ Py/ogGTqlQKlRecdysJUoN/Y0WyX4gp8E78/jdrf7wQ +elo9bSDa5LkTi7bsJbfUM1LGnZgtll4ZSaONjBz/Qbc +-> ssh-rsa I7EAZw +QOko8NtkGmL83hUfyUB7hljd2NRPiumDBWY8vAA4vmWyq/Gv71gKjKfB50cqo4Oq +vxHVlZM+g0PQhJlCLZH4gZwoVniXRtsVo7KlLRI13VpPMmPfN2mLlhvmKmxy+1r9 +RXvYk9Z/NYe6Zz24c17QsxGSyIwXLxdTjvaRH8+pkx3EuIYdS++rONH21B+EkfAJ +KRCsla/vfhGaC2DeOyR7K4hasfbfIiuPEPgeMy55LdHRMjPddKut5YnrD+4r3iXK +O3ct4/w8+k7NKWsRKYY8I8FzQJ2ADJpfcAK2NBo3M5QkM6xD7rXFGNHcl+vztzUG +a+uUsjeZPtyvSdja8uyaF08OVQ41qYGZurnDEVaBcg6f5wfDA0msAqMjeNFs5ayN +4EFq11AiR2gZEJ0vyKNOrPQH9J2KiGKZFt699j0oasFgKWHdrhNlQdDjUy3ylU3L +nSurQFPg+8qolFS7hwiiv0orxV8eaBjwE7yvp8UZK1/XC1imcEShbvyIbTEEezDQ + +-> ssh-rsa 0pGLuA +oXi/tWHfAs/sDj8JtEsfQe5mMFywpKb6WukrCTpo0qAZfdEl6wyvf9j+IFPUUxL9 ++dzNM0fGnBRQOMpU7AeB7wZznK062VxWrOUYWO5qrofhTpJpfib3zSX3M5TLecxr +1s+s0Goim3xWJs03XwKeheqSFT2mwRNSmyk+dYgI8dQ7goA1hUn6jZqH+gg2miHI +0XYppYDGmmuQ+rtvvnt/2r+Gp0WUPHQuB5TTs9BhtZL15mMShL9XN5hIyict+wZR +DNRKwTbJzR3cw+i2IvHGDB8sGLbeCDOqGngvVCkGhELMxTQLd4epnW+wfVmKBqc9 +Oky9INruZxL2TD/pcXwOC1TQC7pRmLT9yZ6p0YMAr7fpvTe20dWewVUE0X2Eisbn +dIob5dusJjs2uqWTKs5j3FZcGfrHeGpWGjanCOovkSONER6IwVB+LdnLf7MB+WM3 +M8voAfaa5RbG/UjhDwSrvJvIMQOHbkljq2/8R1F3x+iVeVrK96w/9a8NStQBaSiA + +-> ssh-rsa JoBDow +duiQ9RqFrUdCUs828+tECTLk6VUZSNuz8bBw2uMcXQeet7I2CKWELpBPGEHj5JGL +79LF/SRcxC9kb4jEFo+TO0qH3JDeSZ03NUcG9Re1bAbAoP1qNPbeK8dAl1dsC0g7 +p/ADm15+uYiiertHbD6iCp0E234ZiFN9tEOITR4NhUQVDJC0uMmRYL4FgWxvxPJp +IvEovvrNen9dy0dpzihcOC2fv3nt8QpuhMS6OQtanSvilrwxGD+MmuSJ1FEb9p1e +biPH8atNotBbqDPJV784e42hgUouLEM1tnRcujZfofENE6Eoe5/RcmjIec4JtFyi +4aU9Vnh7LFX6v38hZZswpegWDav4W158EFxSz4JjIMdYPYAeUJXOJPT+jXacTDIJ +hv8g3ztDWCgW8KA2odOHO6jQ1dMn8o0n+JXgnTvxzGvOyflr9dTbg2YvrDzE7LZY +qujfGxIn5SHPCBPTPef0NQIpBv/HidlX47VV3UmSBaMxeBLENB4aH1c3g02MZPpG + +-> ssh-rsa wzTCUg +ND8YpDmFhYeKH5bRFSWO6X69imBfsH/iKlDkyRyGgWuldMTmAyAg7TB8A56SEH4Y +uqEUNjWK1aNMibXnkT1TfdWjBIndsUV3gWVd8JezMvbWdG7ukuj1jV4grFl8MOmi +uZCoQlJmFMiyuBBdhqe2+w3MpxV8kTEXjytQApRvZC+EiwF5nQvhZH/lv4Sl12n7 +6seWeKxpwOpnZU6fqfVEqwuZFvBIgllv6Ff2KfJ413OCr6UDZj+U8sK4HEr6x4EL +ET6Sh57VXV3ntoFS1z0wBvgQh/Ed2aFSQdDAll5W8QTB91mYAFRBHXfrOqOpBecN +O86J/beml1Sz20QAEMujFGUhgHSTw1mrBId9a0CAUn7+bZN7HTBpnKaBufubj9MN +LwRe6PwA2GgGdnVweHxVYI6OUmYCWkMyvG42rFjd3WDl3ev7r0pTQsnKdAH9DH1R +M3QShaLXhFrvnVei+qmAYQo7ab1gLr9bCW3kPBhVMBTyZbSBue/zhl/Dh3mQFSyZ + +--- aI2L8OoxgqsBI7ORqDkrOcwdJwd5YEcqVkOWZw03YE0 +}r#-VGeyGăjurlU{'Q0urJ@F \ No newline at end of file diff --git a/secrets/secrets.nix b/secrets/secrets.nix index 2195aa8..055d009 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -25,5 +25,7 @@ in "restic-rclone.age".publicKeys = [ rpi4 nullbox slab ] ++ all-user; "restic-password.age".publicKeys = [ rpi4 nullbox slab ] ++ all-user; + + "anki-user.age".publicKeys = [ rpi4 ] ++ all-user; }