jory
9f7431bb36
- Update virtualcam website and API to latest repository revisions. - Add Google OAuth client ID and secrets decryption for Google auth. - Enable Shkeeper BTC/USD payment processing (`BYPASS_PAYMENTS=false`) and add service dependencies. - Update Caddy `admin_gate` IP access rules and remove redundant `admin_gate` import from app proxy. - Configure weekly automatic Nix garbage collection (`--delete-older-than 14d`) and nix store optimization.
Secrets
This directory contains encrypted secrets managed with sops-nix.
Setup
-
Generate an age key on the target machine:
mkdir -p /etc/age age-keygen -o /etc/age/keys.txt -
Add the public key to
.sops.yaml -
Create/edit secrets:
sops secrets/mail-accounts.yaml sops secrets/env.yaml
Files
env.yaml- Environment variables (WG_HOST, PASSWORD_HASH, etc.)mail-accounts.yaml- Mail server account credentialswireguard-keys.yaml- WireGuard private keysssh-keys.yaml- SSH private keys (mail.private, etc.)