.env.age

@@ -1,8 +0,0 @@
-age-encryption.org/v1
--> piv-p256 Vmeusg Apk0u/z04skt4ktJsHDslOrOrwEVcBFzcORCAhbCS48I
-WbCYJz5qY0fWslurJUKUc5Coa1mnZejTd9iNubBYWv8
--> hxTct-grease F
-Nsg4ckSmYxQxGekmQjq6ipcIKgxvRoh4S8Jud45XOjKKQG4vLvdrFtwhf+5MqgjP
-SbvzIs9J1w
---- acYQQSnX0IY7NpTZiPQrtR5S7SIY5PrKrRbBRZl7Glo
-Z²\Vl;Øýá³<C3A1>håò<C3A5>»ÿÚ‚G¨ehÖo„‰Þu¯Ó\ðåg+“ÈkP1+"ziŽI\Æ
<01>nùJr´ÚOÂOÙ4íYÐËèÇ3:MAÚèµÌ®á‘õ˜ÄÜ©N·Ë®q=gЈ¦¿³i4‹P§‡ÝpMQµâÆðXD<Ò1@èM¨™9ˆô9‚çd$2ÔKtâî¡ÝRÙ<52>c"1”Nèžl4+J÷Ç<10>wÆ/³N_\«„M·UÇ©(·ÞÖba?0[†sÑCq¸Û@•C`"cXçË,WúªÌî2[ˆÛ²=ç|Í•"šÎ½Æp­<y"Náco’Šéqø7ê²<C3AA>kÕÌò”rÝ;=KQu¬ÉÏ=Œ–~ÛMØÁ>÷­T

.gitignore

@@ -41,4 +41,3 @@ terraform.rc
 output/
 result
 .direnv/
-.env

flake.nix

@@ -14,9 +14,13 @@
       devShells.default = pkgs.mkShell {
         shellHook =
           ''
-            set -o allexport
-            source .env  set
-            +o allexport
+            bw sync
+            export BW_SESSION=$(bw unlock --raw)
+            export VERCEL_API_TOKEN=$(bw list items --search "Vercel API" | jq -r '.[0].notes')
+            export HCLOUD_TOKEN=$(bw list items --search "Hetzner" | jq -r '.[0].fields[] | select(.name | contains("API")) | .value')
+            export TF_VAR_tailscale_key=$(bw list items --search "Tailscale Key" | jq -r '.[0].notes')
+            export CLOUDFLARE_API_TOKEN=$(bw list items --search "CloudFlare" | jq -r '.[0].fields[] | select(.name | contains("Zone API Key")) | .value')
+            # alias terraform='terraform -chdir=terraform'
           '';
         nativeBuildInputs = [
           pkgs.jq

krops/nas/configuration.nix

@@ -100,22 +100,12 @@
     };
     nginx = {
       enable = true;
-      recommendedGzipSettings = true;
-      recommendedBrotliSettings = true;
-      recommendedZstdSettings = true;
-      recommendedOptimisation = true;
-
+      logError = "/var/log/nginx/debug.log info";
       # We can only proxy one port with Tailscale Funnel so we abuse locations instead.
       virtualHosts."vancouver.gmem.ca" =  {
         default = true;
         enableACME = false;
         forceSSL = false;
-        locations."/" = {
-          root = "/var/www/";
-          extraConfig = ''
-            error_page 404 /404.html;
-          '';
-        };
         locations."/git/" = {
           proxyWebsockets = false; # needed if you need to use WebSocket
           extraConfig =
@@ -150,9 +140,6 @@
           DISABLE_REGISTRATION = true;
           COOKIE_SECURE = true;
         };
-        actions = {
-          ENABLED = true;
-        };
       };
     };
   };