lew/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: scram-sha for shlink user

Browse source
This commit is contained in:
Lewis Wynne 2026-04-08 00:13:52 +01:00
parent d61e01f8fd
commit 131f3b593d
1 changed files with 6 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

14
hosts/lab/shlink.nix
View file

@ -2,7 +2,6 @@
{ {
sops.secrets.shlink-db-password = { sops.secrets.shlink-db-password = {
sopsFile = ../../secrets/shlink.yaml; sopsFile = ../../secrets/shlink.yaml;
owner = "postgres";
}; };
sops.secrets.shlink-api-key = { sops.secrets.shlink-api-key = {
@ -23,18 +22,17 @@
ensureUsers = [{ ensureUsers = [{
name = "shlink"; name = "shlink";
ensureDBOwnership = true; ensureDBOwnership = true;
ensureClauses = {
login = true;
password = "SCRAM-SHA-256$4096:nhQwTFK7rhy8FOrhlgDnvg==$3eB9AlBwUxK1UOiwXAlP5wzxnmKUsBpB1UTsF0cRDIo=:GmxUtrGP6haTPnhPSOL42qsuPwEHV7tME1WfBNucGrU=";
};
}]; }];
authentication = '' authentication = ''
host shlink shlink 127.0.0.1/32 md5 host shlink shlink 127.0.0.1/32 scram-sha-256
host shlink shlink ::1/128 md5 host shlink shlink ::1/128 scram-sha-256
''; '';
}; };
systemd.services.postgresql-setup.postStart = ''
${config.services.postgresql.package}/bin/psql -p $PGPORT -tAc \
"ALTER ROLE shlink PASSWORD '$(tr -d '\n' < ${config.sops.secrets.shlink-db-password.path})';"
'';
services.caddy.virtualHosts."ily.rs" = { services.caddy.virtualHosts."ily.rs" = {
extraConfig = '' extraConfig = ''
redir / https://wynne.rs permanent redir / https://wynne.rs permanent