services.wanderer.secrets

Files containing secrets, passed to the backend as environment variables named after the attribute. POCKETBASE_PROXY_SECRET is passed to the frontend as well. The files are loaded with systemd's LoadCredential and need not be readable by the service user.

Declarations

nixos/modules/services/web-apps/wanderer.nix

Type

open submodule of attribute set of (null or absolute path)

Default

{ }

Example

{
  POCKETBASE_ENCRYPTION_KEY = "/run/secrets/wanderer-encryption-key";
  POCKETBASE_PROXY_SECRET = "/run/secrets/wanderer-proxy-secret";
  POCKETBASE_SMTP_PASSWORD = "/run/secrets/wanderer-smtp-password";
}