diff --git a/machines/perception/configuration.nix b/machines/perception/configuration.nix index 0416441..bcda31e 100644 --- a/machines/perception/configuration.nix +++ b/machines/perception/configuration.nix @@ -13,6 +13,11 @@ sopsFile = ../../secrets/perception/borg.yaml; format = "yaml"; }; + "podgrab" = { + owner = "podgrab"; + format = "binary"; + sopsFile = ../../secrets/perception/podgrab; + }; }; # Setup system configuration nathan = { @@ -238,6 +243,12 @@ dependsOn = [ "plex" ]; }; }; + # Setup podgrab + services.podgrab = { + enable = true; + port = 4242; + passwordFile = config.sops.secrets.podgrab.path; + }; # Make the containers depend on their mounts systemd.services = { "podman-tdarr" = { after = [ "mnt-plex.mount" ]; }; diff --git a/secrets/perception/podgrab b/secrets/perception/podgrab new file mode 100644 index 0000000..9aa5f47 --- /dev/null +++ b/secrets/perception/podgrab @@ -0,0 +1,24 @@ +{ + "data": "ENC[AES256_GCM,data:6P3d1BbGd2TQrOgSDh/Dx6gntJKt8DxJPgmpHQ==,iv:jtRVnFVA+G8OIW2PZmjAqQ3O64VFSFwMB28eWjcBV7Q=,tag:iKSXaqir3E1zocFa4gjwtQ==,type:str]", + "sops": { + "kms": null, + "gcp_kms": null, + "azure_kv": null, + "hc_vault": null, + "age": [ + { + "recipient": "age1ud80054jwf6ff7xx65ta6g7qxx2flc24r5gyyfjz43kvppjutqyskr2qm2", + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHVHdhK0hzME9SVk5mOG11\ncXR6NlFUSzJhSGJaNmJ3dytsQUdvN3pJZFd3CnAyTzhYTHdFdDMvV2Z4WkFZQUpj\nYjdjeW1tVmM0NjBCOE4zTlpNc1JSTGcKLS0tIC9OSTlGL3hhMjZZV2huM2hpQ2U4\nbWpHUk1nOHlPWGxUc1FPWE1hVFplQUkK/8E0keDtYm+4+pwVOaCHmaB9N6aPRE7s\n0qDKe0EwE8m6igktUXJmRavhSo40Eo6IaES36f/V4XEIkwGWiRP9jQ==\n-----END AGE ENCRYPTED FILE-----\n" + }, + { + "recipient": "age1rztv2778cf2dcpzcpth888cq7u3rdsl7tfuhv4sddysdnqjxaevqg72t5l", + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEMmF5OWNaUnl1M2tDR1M4\neVR0NUtlbjA0REJwUGtWdnA1SjB5YXltMUNBClRpNTFFWTdBWDVOamxnSmlYclFM\nWEkwN1hBR3FVclQzWWZzMW5DcWM4M3cKLS0tIERtMXMzWUxrT1MyYURmK2J4ZlZj\ncGZVN3hEUkY1ZGRpV3h0c1pDbXVuRFUKhMpc5Eylqhdfxr70SWSRJofT8NOpNkZf\nLcDEEFxkTLeq6eozNIUW06WiMjobbMmTffTdB/nOyy2pA9GmX1m9+A==\n-----END AGE ENCRYPTED FILE-----\n" + } + ], + "lastmodified": "2023-06-21T07:42:16Z", + "mac": "ENC[AES256_GCM,data:sXNTqP1rWY3+lUOtWPR1TDJSdYiWCObMY1PWfttpXWx/uQd1ezy7pxWfcHQh5gv5c1Nk5dlEqwtAsMJ24tQTzVh4B3zDZCkM+Kl5JNRUyzgobkU7R7dGrnynubI1qIDKcJKK5/fmMC8HlD3z0D2ue4gQYzYiY8z69dL+6ZKaFTw=,iv:Yu8MaCqu/lRHuzvMmiyQ0kJyNIZuEgZw4oaLj/MncRA=,tag:ZWO5FuK6Du2U8WJDGizlHw==,type:str]", + "pgp": null, + "unencrypted_suffix": "_unencrypted", + "version": "3.7.3" + } +} \ No newline at end of file