lew/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: scram-sha for shlink user

Browse source
This commit is contained in:
Lewis Wynne 2026-04-08 00:13:52 +01:00
parent d61e01f8fd
commit 131f3b593d
1 changed files with 6 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

14
hosts/lab/shlink.nix
View file

@ -2,7 +2,6 @@
{
sops.secrets.shlink-db-password = {
sopsFile = ../../secrets/shlink.yaml;
owner = "postgres";
};
sops.secrets.shlink-api-key = {
@ -23,18 +22,17 @@
ensureUsers = [{
name = "shlink";
ensureDBOwnership = true;
ensureClauses = {
login = true;
password = "SCRAM-SHA-256$4096:nhQwTFK7rhy8FOrhlgDnvg==$3eB9AlBwUxK1UOiwXAlP5wzxnmKUsBpB1UTsF0cRDIo=:GmxUtrGP6haTPnhPSOL42qsuPwEHV7tME1WfBNucGrU=";
};
}];
authentication = ''
host shlink shlink 127.0.0.1/32 md5
host shlink shlink ::1/128 md5
host shlink shlink 127.0.0.1/32 scram-sha-256
host shlink shlink ::1/128 scram-sha-256
'';
};
systemd.services.postgresql-setup.postStart = ''
${config.services.postgresql.package}/bin/psql -p $PGPORT -tAc \
"ALTER ROLE shlink PASSWORD '$(tr -d '\n' < ${config.sops.secrets.shlink-db-password.path})';"
'';
services.caddy.virtualHosts."ily.rs" = {
extraConfig = ''
redir / https://wynne.rs permanent