Files
2026-06-30 04:26:40 +03:00

25 lines
618 B
Nix

{ config, lib, ... }:
with lib;
let
cfg = config.selfhosted;
domain = "${config.sops.placeholder."domains/serv"}";
zerobyteDomain = "${cfg.zerobyte.subdomain}.${domain}";
trustedOrigins = [
"https://${zerobyteDomain}"
"https://${cfg.pocket-id.subdomain}.${domain}"
];
in
{
sops.secrets = {
"zerobyte/app_secret" = { };
};
sops.templates."zerobyte.env".content = ''
TZ=${config.time.timeZone}
BASE_URL=https://${zerobyteDomain}
APP_SECRET=${config.sops.placeholder."zerobyte/app_secret"}
TRUST_PROXY=true
TRUSTED_ORIGINS=${(concatStringsSep "," trustedOrigins)}
'';
}