From 084bf3eb177fd76174bc1f8ab8cfcbc765c08ac3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Nikodem=20Rabuli=C5=84ski?= Date: Sat, 3 May 2025 11:08:24 +0200 Subject: [PATCH] services/paperless: init --- secrets/alert-nrab-lol-pass.age | Bin 384 -> 384 bytes secrets/alert-plain-pass.age | 38 ++++++++++---------- secrets/attic-creds.age | 12 +++---- secrets/forgejo-token.age | Bin 479 -> 479 bytes secrets/github-token.age | Bin 583 -> 583 bytes secrets/hercules-cache.age | Bin 869 -> 869 bytes secrets/hercules-secrets.age | Bin 813 -> 813 bytes secrets/hercules-token.age | Bin 778 -> 778 bytes secrets/leet-nrab-lol-pass.age | 12 +++---- secrets/miyagi-niko-pass.age | 13 ++++--- secrets/nrab-lol-cf.age | Bin 380 -> 380 bytes secrets/ntfy-alert-pass.age | 36 +++++++++---------- secrets/ntfy-niko-pass.age | 14 ++++---- secrets/paperless-pass.age | 7 ++++ secrets/rab-lol-cf.age | Bin 380 -> 490 bytes secrets/rabulinski-com-cf.age | Bin 380 -> 380 bytes secrets/secrets.nix | 5 +++ secrets/storage-box-creds.age | 13 +++---- secrets/storage-box-webdav.age | 13 ++++--- secrets/ude-deluge.age | 13 +++---- secrets/youko-niko-pass.age | 12 +++---- secrets/zitadel-master.age | Bin 354 -> 354 bytes services/default.nix | 1 + services/paperless.nix | 61 ++++++++++++++++++++++++++++++++ 24 files changed, 163 insertions(+), 87 deletions(-) create mode 100644 secrets/paperless-pass.age create mode 100644 services/paperless.nix diff --git a/secrets/alert-nrab-lol-pass.age b/secrets/alert-nrab-lol-pass.age index a5e31ca003669aa2da7141c27a01fc8aea40df94..3676a47bfc0223f11fa69918cb627e19244a6ca9 100644 GIT binary patch delta 349 zcmZo*ZeX6EQ}1ROqVFH+>XI8!l@#ipS7n-?XkJ=kWKxzB=>HlvVdRq*WE4?o!KG`bP+Xj$ zo0?)|YHDby;O?DKR-UeqAC&8oof_g-?ik{qn(XQvP+wt@8eC;qm6uoLXYTIglW*u% z=9lW7U6c{YRS=e!?h|5BmgSY}?4MYc6yW2Z=bcljT~!|G>t$4$7+O$};gzm!>J@Cj zrK_u}knK_KrEglIAC*_)<5Llmm|Rs>?pKsoQtlO+?G_Z06;_($m0#kfA8cX3Wv(ru zsrk-~H_VZ9gW24rx?8<}zl&%7ZoXz&R5sUS$6u=oMB46rHrMIS=y!(qL09tr{7XSbN delta 349 zcmZo*ZeX6EQy-dIp>Gjp9$u(#=~QKzSLPK|o|a?kW~LvQT9KKT=;E1?YG{(~SQws{ z&ZVDI7Ga)Tl^KzopAqh9;TCL>TA7rT;+PojlI~~ZS5{`EZ>;a)lIZM~&ZTRoP+Xj$ zo0?)|YHDby;O?DKR-UflmFsK~9_nNgoL%5rX_*)4UY~DSoR;qwP+?f$?^sw?Xb|aA zm|~J+QWjp$x;aqH<8krMNR;FF)lV4Wp=2(%Pm{Fu(V47Hv?4#|JnUj{y zrK_u}kZoELUk%e6n-fx(ku7>N8~ZXi5LEaT;Gv ssh-ed25519 GKhvwg ZvzKWT14nrdbiVRJf4hK3Gmb7pkLA1YrzIAXi7GqUm0 -OqGUgm/4oefj+J6JrIM42FPq/2tH/evQfKYQGCSMIc4 --> ssh-ed25519 H0Rg/A ucyXgt869tI6HWLjrsg5o65HBBHnjiAyJ2T7aCps7iQ -h58tIKkuHEFM+7VRl6u+3vvV3XQ0r+XqvUo7OdLuKEg --> ssh-ed25519 84j9mw 2a5d7xIwqwF9MuAKv490mGUMYiDvZWK8+sLDjShpnmk -7CH1AzJQD7nrq7aKZJy54+74awO2MHO6RySq29/MH18 --> ssh-ed25519 5A7peQ 8h1pfClbTdBZuSZyw1LcntL6QIDXukYkJ+SBmcZMYAE -d8gix1GBYjqe8nYc/gdOxEvsYNo7+W+vhQZq/RFPeRw --> ssh-ed25519 g2vRWw E4b+U5rVKsurdddkOSeDKmhIQW5iK4hdoRePQjohM2w -+WlMZ6Yd9iCqcm/WIrzRSRU9fmqdtc2Lb79wgB945Kg --> ssh-ed25519 B2veVw 4APxbmXkGw6O319hX1rPpgCz2BNXs1fa71eopRvgsFI -AQ3FsW+H7qYg90JG8904/N0FjxjH4S70S1Gyer1BiXI --> ssh-ed25519 IFuY+w +W4IMgBS9ihPCEGWQw8DrsTkF8Ih5H1+ZjhmGdPimQE -qlMFMVpw6uvH/OqGx/fIBFcP41RlXxyXKJ3//1N7mcQ --> ssh-ed25519 rA7dkQ 1XI21LILuaiYGHbdgCllU+H8N+/YPq9FyrOUTp0AXCI -vklhN/5KOmbB0MaQ4F/iIuj5ReLiBrmFQunPtJu0o7w ---- 5T2/adM9me57EcbMcLPba1MIisFzJnXLC+inc57bJdk -Ji'6&&o -k4-hu}2|1DIl9ܦY \ No newline at end of file +-> ssh-ed25519 GKhvwg /jQLcJCNx2g7rM8udm1ZyPDeqc0pJ95VpIsWObAG/xM +0QCmRI3pXNLmzIENjDyVNQLISQd6uyA/HOyXB1W47X0 +-> ssh-ed25519 H0Rg/A r98Ge9hReVxBKmQuAfX63L8y9W2vQh2PC/VMtGnS/SE +itKOWkxTHsM/SlhW+AA037ns0XmOaLHWrEtguC5h5Pw +-> ssh-ed25519 84j9mw FlKDqV1OxbxZ3s6mtYS6hzdOrMvY+GuYrXWoBk2Xo0Q +XqYK9dQXXx8eKlYhwQ5N+62GX/48VWQ51UyNialg5/E +-> ssh-ed25519 5A7peQ MIpjM9J/7wAVGuB5eRStLAAqLEE9Ff4E6eoWqEE4lk8 +J0o+kgUBuk0odbuLvuRns699wfY/LPHc9RZydpnyVc0 +-> ssh-ed25519 g2vRWw eNdLCZX01DMm9nZgugFCXIoqANF4Um+xxKQQf8SOax0 +i7H34Lumyn5qtigixSRbaYf1bm92kQLCf+EZKJeYmlw +-> ssh-ed25519 B2veVw DvHqN4AUU1mjB++Qwz1vNYHxST/8qZTM+p9PfIyFsHw +BU+58wSWdknW6WbEr+uCenfaC1vLm3usdP1P8YBbn+8 +-> ssh-ed25519 IFuY+w d3WEXFMgaOUSo3jwkOBzmqTqYyZLkIWnINFj7FZCHlE +u7KuKcjzTvCMJqiIzE2wNxNUjQuVaCcumnkNmVIg460 +-> ssh-ed25519 rA7dkQ XjfR8WOE/ajNfI2PvtjccMWt4ZA5ZcQfRLaswf8o/BM +cjEt4pbJgoiqQYDMAeOEKO8IsGrutkbYiJt+s9v65+M +--- Itt4v03PVRtcZ+msFBO6VKi3kDuK5+mjsQ0LZXQhWTk +3qo߅n/3$? _m8 +v:mjd|wr \ No newline at end of file diff --git a/secrets/attic-creds.age b/secrets/attic-creds.age index e901eb7..327f967 100644 --- a/secrets/attic-creds.age +++ b/secrets/attic-creds.age @@ -1,7 +1,7 @@ age-encryption.org/v1 --> ssh-ed25519 84j9mw ZJAtY/6itD2g/hCRjxKrV1ZWQIzM/YgKGNa5CT71YBc -mMGp1ZjBx0qEugMAnixkVn88HqdNui/gyJt/okwRDP8 --> ssh-ed25519 GKhvwg JbvduCfwAY610WxpitcGlScY98bGeNYDqKuxHkrqZDU -4aCApDeZnE/7xA3JzxqD5awQv9N5oa2TcHQOZx+CBpE ---- nGz8lBsZ79RPshiTTFlSTVsZP7lfaNKBZFC7TtZ2ves -['!eUTRG̠1dI{aϪ+'?"ʵ&NxkāRϗ)\a~o`htΖ-WrhxE +']>r9Oa=+W t} \ No newline at end of file +-> ssh-ed25519 84j9mw NTO+6rjQ67mvDfLbkZNyuvxGXVlKjqnH5Wg0/qD8Zkk +oIrs9tsRkEqIb9lLQnF61DefTWtF60iSJEfm2b4dkLU +-> ssh-ed25519 GKhvwg 1URR/IKkYchQlxgQDK0Dh20KXTrulyJfnO3JXjECBjw +K2N7/b88tkEa8bTSRRWLChPN5GbbNip4qDx4HubEP9s +--- 4DdZ4N53a/aiMQcO0okbaeo3npYD+WrjoFYVnIMkmEk +(5/[p+&.$*Z*b~¤>"& !9RG7r?KrDmEl~1DѨCgE?q"w7:X|Dpg4Y4bĩ-.`#wC,y|["k*YF \ No newline at end of file diff --git a/secrets/forgejo-token.age b/secrets/forgejo-token.age index f16f8e1c0958e8ab2e39d408d457a5771b041714..4f8cba62e0bf056d69c18916e2fcbefeff8c02fb 100644 GIT binary patch delta 425 zcmcc5e4lxOPJO6JT25M`TT)b>OQNGiT3%peWxh+euc47)fv2T&h-H9xu9Ii3w{w6| zF_(#>TV9lQNKS60iC36&c1T9Dg-5w*l(wZ~VXjHAw~K#JsC!^~vWsJWIhU@TLUD11 zZfc5=si~o*f~Q+)q;|Q2w@a#VqJChur-4bOepOVukDFDKjPEl2&ccx!hcyU2xZm~sGx^YhO z#E;_jE7! z;V#;xhGvchK|V%anL)lT$yG*P-r-g59{R4O$@+OwSr!q=DQ@{(y1Kdw=^5Il{$5^T zQQD4y&d&a3VaAySVI_VQiS8MJ`l;DwIWB$?VWuV?M&-E{TtCm%Pns31S=KdYyUT^y zI}YtUbE)RW7l&u{6`jJ3YtH)5a25I^Aiv`@8~@B^b@mUM_Q@WWp}QQ+yfXgT V<=(X$S4bwgC+*gFd~<`#BmkbBnZE!4 delta 425 zcmcc5e4lxOPQ7bRab$^;uZf#~Qf6hLrCC^!cSKc|YlW+Eq+3{!L5N3Qdaz-5j!~7f z30J6dQI2t*M^><#cZFAEhFfJ?xQBLuu~$Y;R#I|!MUuW_dQ!4!PM&{-374*&LUD11 zZfc5=si~o*f~Q+)q;|PNfU8kSNM*84siKDTx)SrfDfzpqUT)X4TP2YX9ms{ld>fNVl zTI+U7o;ELVWH?;9?_t1c^_oo|ml^b^t(fHb)#<`|i`LLBI-0vaYH+Rg{~@`>vh|p9 V=#TwVrUWq5_5dq{AeW2UR0SxRAM zq(xeQi+)ZhS8j!Ouv?g0sIy;HZeFl!M3`e$R=SZvZoXlNZ>mRRp0|N^k#Ay^sacfc z#E;_PCN9ZQCRIrh&KX(0;reblA=+N9p@o&nq4^a>A?D#}`399{6(ynW<)PVJZpj8l z{zj(d?*2Z;89^3_h6WXB0jW7DNvQ>??)rWqp=SP7`h`{HCCRRn;~B;46HO{ZjDlQ4 zeFKW}3W_|-%R^HWBag!ws^zTyhc(!t(VU16(WJjrC2; zT?>O!-JCPivZ9PCqauyWtHR1nOiC)M98I#hbaizVii0yV^1_o#U2{T>O8iX>iz~EU zEL;stOT&vSDoO+N^NKx!g1oYV%`=_zxzr7g_}>s&&=$GGWbO7+g=Jl~R- z@ia@W2&}iSVo|scX?uFq-&0od!}nvNM2S%aB_NjxQVCd z#E;_P$&nsej`@k9WffHcZU+9wrH+Bc#f26*F8PsuZjs5Bk(ohho?%IbMOl$t7A}E- z=>~Zr5yna0fj<5gt_4+&0l|Uc$;Qr^Mvj4ru2E(YL8-pEVJ_*D;~B;4olHwiqx`cx zEQ%^kor{CL%lxC#f)m3-%p#LL4TGIslfrY$O7gOU!*U(D91UEZv(geveG5VoGqtmd z!z(MI$}Ce8i*pUV(~^pO!orG5++Fhx%|i0IbaizVD*Tg!Ez?s?9Nnu-ovR#8Je^8B zU7Sm^j6D6l-3nbIEA>NzLL!4aT_d9$xh$q_uk=(p`keFm)I-b@&F55?I5U{#w;tMG z=(PQ2!@R}&wOxJxe%_+F$tmW?g~BHv6Wb=_H9k3ZhHcd?^>cwqu2*N|9e8*AyD&EZ Dvs|_~ diff --git a/secrets/hercules-cache.age b/secrets/hercules-cache.age index 48de2e92d78f71dc7278119e66b146191eada756..9ed43f736290d03c9afee6e5e91fad9fc11dada5 100644 GIT binary patch delta 799 zcmaFL_LOacPQ9^#c~EAVtGjD{WUg~zN~%$1q_a~-xKF-orn6VLPpM0>X;^x2aj|%TQF3afvxSedlUZm)PD*HYS#o7&ibYbIZ)R~+MNzq#xwf%eB$uw8LUD11 zZfc5=si~o*f~Q+)q;|PNL3(k7aj9uam3OYbd4Xwerkk&uYfxT5M6$bcX;fu~pHE?; zOGuWhVOgaKS9V!uaF~UQm#29_MzE{1L6Ld3rCW}^p}%9AL1aX6sh4GOh-Xe>NQJ4z z#E;_PMy?sz0hMlf#yP%`S!M~dzLsIxp_z%=$=RMRXN5%VHPGSIewvr*?FOp;~B;4iybSylahl& zi`@*o{M|h~j7`JCv;(V3oC?#DvI7l#Eww96BV0@U^CDci^j*zULJT9dgA%>{4TFrs zvfN6|Bi#$k^oui+%k%@2y$XCw3d#&KLn|Y>baizVLd{Y`vIEKjJ*qszv|ST(@x2;LAaR&40(lTsNsL(KCo+pay%@dERn$-4v<)?e6^trM{4GAXRT-Qd+<1J_x^f84c4}sYWtS#e{(`;`opxNTl|y!<%BQvtc<^_ z^zKXl3inSbH`Xl(&EMu zIy!UXzd19GzgQvfe{tsJlo>HSDVOhb*Uq=N`sqgK7H*4UYiAuWezg1Sd);R{?9aHE v?9g$P*LpK=l}nbSoVeiOzw#?IXZ;pfs@b}JTK)Qe!re#ZHU~8DggpQNp<+dS delta 799 zcmaFL_LOacPJLEoYH(6$wp)OqnPp13zkX7hTasIGT263Aaao2zep;@vg1?t$;lO=-i85{;ZDiU;clUMCb8Xwu z#;Iwc`o_*>xdr+KX@zN(u2J48E+)m!rs<(6$)=@g{?6KlsZ|z};~B;4vr;V6qP&bv z4J^yNl3hZ~Ttj?|a*WdRQUlGC%tP{gw0-?UOY&U8!b7sTvfPp^9D_oFJoCyeg3NOw zT`S!ELetZNvdnYRQnP)cJe|q{B62H&y&{vjbaizVaKh0 zD?jSh(bJ+e&g;{~ws;ra4qCibDF4ofyyffx{cn+>{Q)7Eu-;)yl0$Iih)^bM9cDs%^X2xdToTh$rQgmD4iLiq%tLr7ROg4S~ zX3V#sDyuVm08<3nWv})0=oI>^U@ma!?=dgxcU)OK`%icU7CS%U?%U`_f zz4Um$aA&dmx8JDKRXjPV2Ewe$TOS{qJZqwKhb*^_8DE*)c2iC!@fH8H)-zG+ITt>El0E|f-L6ID diff --git a/secrets/hercules-secrets.age b/secrets/hercules-secrets.age index b192321de227f9bd47d968ad85a2f80fbb0628bc..488a6507fc59d42dd147b540ae7965062dbfb228 100644 GIT binary patch delta 743 zcmZ3>ww7&zPQ8(_yP<_|uAi4hmUd85p;4f7UXHnTSV>e;S$U9usd-^lsf9^tqL*1^ zHkVseK)AM3cDYG*RGNQMRgj~oXv6qRluS;G?WrllXL}E!wiAk~N z#E;_PSuRG!K5i~amRZh8uBkpj+CfIa0f{b|CE;!?8T~hK5(mh;V{L3TUf+EY( zGThVBJ;Dvm-Ew@K^V~!0^DIp)EK)5!xe}_A@*Ec5sCjhozT}c+jJ;LHmlbo?M_!!x zne#wm(bLP4ldJvApKC2jE^#!=Ihi)4Io<2<_rQef3#b2|a9#RHZuN&4=ISS#F5EX; zvCZE`?arR^+Gkfhc4*#Gn0iM_@LcC({xUw-HM`%7E2}l}&t^+E`u9Wk^rCw06>JBd z#*4bw1zCxm{r>Wbx)RHA^@XP%f8^3K4?N`*{W{>0``Wl(##Q1xQ65!?J)(Ci?p-?X zieoqL`W-hm23h5w;?ca^`t-Bt`TK(L$ddZ^RoU<#Em*^I;J$~nB)mt(3#+>Se ns>od_6OH8GJSy!xbue)qL+H{Yt302^UtZ97+DlM9!|fCR;c6vO delta 743 zcmZ3>ww7&zPJL2&qIPL$MP+c7n@g5|qH|SHW>jTln0JmzLB3(6OQL_iOQ26-p?^}a zCs$%+M47phx0`8Bc9pMjVy1DChmS>OQ9x>mn~`5md45)=QJ6YuXk0jUxc@*PnuI+ii?w%XGn@!dWciHWr|mLW|5`q z#E;_PewBsZp}E=?8EGELUgl;7mBy|mB?T3g=@Auy5#DYQp+TV*1s>^!Nsi@QK^f+* zg?TQC>7j0Axt^}YZrNGcu0|zcRXG{qMega2e%_Uqp@F^zF6O?I;~B;4y^NEz)7^a& zQ*+(RgOkj&(o&sE(=C&dvm!#hl0q$`A(N^*UpBDD>IgCoN#qJn*0 z0$rWLog=HfLp?&mlH5EDGfOLzJSv^a@{26EbaizVLNg5gjE%y4LIRC)D>8~JN=*#h zl03@{QUbFJ15(nQvb78Ajq|+pD*~cSxU5%{+}QU1Va}PEEkW{?b24sD3lw*Xkf=JI zd7pjRziq5fRK5Hht}XxPCfDpzX0dCp-X)irlXdpWFN^n*S~TyjhK=C<0$rQEB90%^ zrsrs0{oy7MxN*waG`Yz?UUICG(4KDgF4v>?-`!0|_fLCXC-dQC(5(%YB0@EF=7<8n6EQF@f>Ry5=C8n(6-1CYLX3bg(u*@jmNNp5j}` zS*#k7;=ZmZd}c1c*AAgPhA=&zdMNtX6jZ=hJ)J zHcI*hFGyQy_FwS3&WVJ5-U=7H{$9A?@xW1;>UYB%!yU?zyBiHoC1?Hj@bKk>xH*EonjV0Uw diff --git a/secrets/hercules-token.age b/secrets/hercules-token.age index a7a66a7668c205a2f884bf56be0a0aac9004575e..7f2f655ef2798abf96a1797e6e34e3470265136f 100644 GIT binary patch delta 708 zcmeBT>tdUrQ=b!Qk(O%el9N-Jy z&J|?hR#jZ2U*?|S>|LCaY;0r^U|?bzl~w4KTIG>f;O-lgm1Y!NSy)o;$)#(jP+Xj$ zo0?)|YHDby;OSNxsa>v6Sz#QWR2-U_Ut*D79$}sp=~kTN>JyP}?wK9tpHfn6Vd!cU znCaqX6ycK26&g`d9_1S8pYLIA5$NPwY7v_1krI$m;p*q>7wHxrn3-*2nHKErYZ&D_ z@uPTnexysLOI31qR-v&`nQ3-Xl&5!~Yj$#mX?m$|zK2<*Z;E-AqoH{~erPtAiHo^= zsZnx8pl5nfwqd?Uno)3trXQjD`Q($Onm61thVwB0`ct-L1Y{!hO$nY@N ztc)~s^XyVDlZxEHh}@_spY-tTRFAAO!$NZ>=hEO5%ODf3WKYjxzvN)gGOvP^to&p* zPfMR5HzO}glkyT5N8`fCqyYCs?U0hlg6vQ(U0q!TXJg;UvJ8tv{lch_s6^lVWJi7H zv`81{j691Xw@^>h^sJEjvUCH-)KI5vF8*s(E%O}9Da_iyHt6@CVShRow4vC6ThFY$ro{nTl)TmY`=2_TPD;$_HKO1s!{)C-AjAz z*!%I#FJhm6$x~!3XlGWkzkf3$Uv+D&`^1(i#^0S=B6l56lra%pb!&^*qn{b23~e;1%6jKqz_KT<^`Ae4$m&ejGk>V^rdwY3>_N^; zPfNa7ooeq`CUas(`$ElcruQD@A6up+B<|L@!lRhA!Rl_San06?_FIqqYTNZO;s5|8 COc-$h delta 708 zcmeBT>tdUrQ}1P#s$Y_o=HyrAtL+h#Wgg&^TjcIjVp!}RSQuehmEjaz=I))JS6Sj1 z$Q4}TlvZl!8yxDL;%A&zn3S399b{(Y=2YqA7m=Zz7!>Lqkl~Y7m78Xo&ZTRoP+Xj$ zo0?)|YHDby;OSNxsa>vMXla;PWuzVK9F-g35@hUV;uaZ^S7Gj0Tx?NhmXwkh9PH|s z=bK_4>>lXIRh}K@lpLI8l;`4_lA4-tSeoTi73ydi=u;NqRg_|p>l7JQ98{5?lAD%1 z@uPTnxu<`gd7w*vc4S7rdzNoVWsZ@rVQ_$JLArK{VOEZNR%nKYqjrH~k#Rm(gs*YF ztC4Sox1WAlj)!+*cy@Y(XS#ENS9(OHM`}r4o=>KaOGJies7vwWct-L13}07m&m=>S zigfJ?&yw(rlANsI%*>EL{Q|dgSKp9;Dkqop$Y2-OoX~VG?~;6duk5e@Lz9Xkv#=D` zB11C+$AX};?6f@Bs9eW9x9sFdi#*5RC<9+EU0q#;(yEG_vQb(5nSHt485QC`ta3d36%hJL?uJ8r3f8BYY{&@wfcA>Vpz_Vtx1;G(-f^MZW z2$cNV7jWKNW}dlWsX@&@tJQy(q-M-BD!4Lt+MAsHANs|E16Q5ONKLYoKmWPv93Riu zJl)b#wbzF>sXI*iT<~e}oT(vRc9pNho^{2p(KM>(JTE!x-$v#KYmV<(6H;$8<&W)8 zofz(3`3H>ae_aVz?cd0Fe%;fZtX!Mb*{Vn zB|E`(cf|X<|Fp_IwT<;ZX}M@mz4Y4M`k21%>7JJS#ewhh=CPG`xUJL3Z9gsE^So+O z{mzH$mgcPs*|m1dt=1GqHn+n+xbE0Y5Rc$x6Bb(^nm4EA@pQJT*QeUk)Hl4DCI ssh-ed25519 84j9mw 9ygN4fWQWX889zSTchiwqVwxTzHzl+3PSelEpeGx6yA -v1GTvSMdbwC6U0QZtaD7/b5QbJ9j4J3F10eCUaT5COY --> ssh-ed25519 GKhvwg 9I2sycYPtBMPZenbWLueANm46TTPzbgCa//4oKojGEQ -aEX3TQpWRAcrtJaiTMxB08L8OY/O/4JR+/zoNPl7Kxc ---- 6EB80pdWxmL1yVM+klouel5E59m2C88Dz0SH2DiT6nE -hkdJw|g~v^jq\ ' yIcdWYF?N/0+h=85# \bm~1y"qAT \ No newline at end of file +-> ssh-ed25519 84j9mw 7HLXJ0FPIlK/5skZB7HsmzyMX3S7I41wPsEPZ7Jb/28 +MJ9oeQWZ9QlL6kuB8QUHoOjdXqOqqpA3kHpr2h/6A5A +-> ssh-ed25519 GKhvwg oVRn1+ZoRU39ucM/It+cxfLEMjF0uSV1O7k0J/8DgnM +ATACnP4ASRJ1qhyrm8yhi2qtDftXMiQ91CbmuqIm2gI +--- ucDElqkYHEoTy0c+vPsy2AQ3aqJmkDSBAADiKB71k2o +.ƛLlCgs.IžR .qxL2BNjFo9]9gTqNia]eaGSkY$ ssh-ed25519 g2vRWw 8FCO/eYVK3KfOvdyk5Va3R9jXaSNzV+ArFVhJwJPDDk -zRBpyAtdJxg4TSsgUep66Yv2CMUUAI8IF3pL5+MI/88 --> ssh-ed25519 GKhvwg eMLyDK82QCKJrVjtfuy5DKTNFOc39zdJxJNFEXCO1Ac -6AamgzEBeT1018cy7N5GcvgjypGPLqF+2P14h//jTtA ---- jhq8ZEIoUjMq5PH7tktWMKQuCLMKifY/UfjjM1Qn7UE -Q8cV2 ƈ4$h+ey -0#aJ`ng{@.sIgϞc*Q'&k,CuIwɘ +rENշ@FPI?ђ \ No newline at end of file +-> ssh-ed25519 g2vRWw btMiKwz3PwvUTHhz3eQU1PkMqSPJ9gpVZ9WC7u49xmQ +jhQgjo4Vt7e6Q9uERj9UG4AM/gMhMUexBWHI4ofrx7c +-> ssh-ed25519 GKhvwg sZvZftsPUAjQ27PleicM9It+gpRjwPWOdxx85Mr5fxY +G3VOFsNg2p1/KTyACw9QlvfBsyNUG9v7LSkWJl8afrg +--- letALmlj/zH1GJl31nWXeURJHZI6UkToZiTIUgZLv8s +lbxCI_ d:@@^ o:]1s;iv"̽thTwlˠil{An.v[GU0%) \ No newline at end of file diff --git a/secrets/nrab-lol-cf.age b/secrets/nrab-lol-cf.age index bf3032b5b9c19ee0cdf3dbbb19a21c51e7570d32..f991709bfa6bebe37f6585b8ccaff938cb4aa4fb 100644 GIT binary patch delta 345 zcmeyv^oMDJPJLpPX=%D+Wl&j3MrvMKaB*P1S-M%4e`HdGSwvR3fpKZ6Uv`wGS4EOX zGFP^~NwRB3Vo{-AMQ)`_X`Vr#S(>GncDAEWa8X{BS6-2EnPZZBPI94zE0?aFLUD11 zZfc5=si~o*g1dJ{S$VpGbEdaPX#mS!RikQGI1vKtWJdMRs{+o?A|GMVVuv zS5lc#VQ`iOSGq}hc~V4KX{J-EtFvQ}u~AxRiG_J&R-TKgV`@N=Yj%p4mtUDtcyOR2 zm#(g^LU34sQDuRlMPyW{vrBN$PMFJ^uBEqoHqw{)-faoGJQ{r=r z$x7)v|ANZG!#(P@&HNmv6mun}=(hWAt(%?v3gTtzw|``FzpAsJ9aKNRyGg2Wk=p;G sw&B^yC*)4|D=;ulXK7(H^-gT}oRFS&)IsTPRMITZrqm0M4|$mb06H&wvH$=8 diff --git a/secrets/ntfy-alert-pass.age b/secrets/ntfy-alert-pass.age index 4e997b6..4b28129 100644 --- a/secrets/ntfy-alert-pass.age +++ b/secrets/ntfy-alert-pass.age @@ -1,19 +1,19 @@ age-encryption.org/v1 --> ssh-ed25519 H0Rg/A Gu5zy+v+SITLh8SsiBXDnFDW007MNnWQ3Qo1XnKQVTM -0OLIB6bgEHct3n4ev0HgfaUOl8t93DM3qInsrfBn4Vw --> ssh-ed25519 84j9mw XBb71lyuXkIGxSL+VHv4To64qjGv3tqGGMa5J414uE0 -kuVmbLJ4ZyC6rmNUZOEXfrYHm89iXRqwP2Gv5lV4XSE --> ssh-ed25519 5A7peQ Zby6NTv0q8OQ9qvo7DvE4OVOpShVKE8K7QWTson0DCo -eMTfWLUUImhEfXlBl8gYoA1YK0gfpB8VyWa2L3RCA1w --> ssh-ed25519 g2vRWw W5ZMWxUBPvef4sWXhv2aMCLZKlW++4n78vjJ+UE8XFE -0J4OEvtTaffnRHQdfzGOOtBdgmq9is63uSLNFfZ59Oo --> ssh-ed25519 B2veVw tZ3sVtgqEJ5LbK3b2xcH+0z8LaNUPs4KZO9A/VLH71g -MUuolaOws9FLq5MwrGKbseG5Xaok/gad6LQ5bxhN+ss --> ssh-ed25519 IFuY+w sz83GwAlZD8Zp2kH+7pwnETPKSfXDRgSXzNteAAGXF0 -4ByeRXyTp9+XpOirDvPAfDqfxyQXXqdEtTSq/CqKP0o --> ssh-ed25519 rA7dkQ b7UcNJ+8UhrBnJieRvNxHXFBmr6uyh9q4ZtD9vpsTRI -2/jPFKnWvCwc+Ki9gWJ8sbGetH46DZMk7LyxmqSlAe8 --> ssh-ed25519 GKhvwg 1HxU3yc2MfaW6N/zOg5ZRD+imMAIhIdKCp5FYR1BXjY -LlmcWTkjbm9Ig5rECdKieEsbmPZiFenZnLZ4p8YbUbI ---- 8E31okL3vgwlYthWyy+sshdJDHWGBjawZoS/3QaqjT0 -=u\eFcHret[92#YwN~Gfӷ xG^0=W ӓE& \ No newline at end of file +-> ssh-ed25519 H0Rg/A ti8Cilk/v+91Nckt/CuYl6qRuRb3W60gvhB43FW1znI +EeLV+OccotivcRsN/aB/UdF89WiPlJ6R8PeKN6b+OQs +-> ssh-ed25519 84j9mw 5rRP84YZGBMCFStzc5aeOqBmsAmjSb3GkKl47Msuei8 +DLtAz8tWkLu3QBeR+M5ZlJH6c6+GKPwf+qy3NpdTCOo +-> ssh-ed25519 5A7peQ d6JYwhySRN6B0eHl+JiZkxawZuMYuS7RDrSKMQYHLzI +/Yg5Hx948SBDD8shA49Bnv8hooPokYG7Fn9roswNIWI +-> ssh-ed25519 g2vRWw gltJGTfV+a8BKaAkBGXkiW57ymv0vPBQnCS2BWJ6fDc ++yBjIKMdM4eUVJvjs/UedjTH6hLRs56hDUpjpLC/q84 +-> ssh-ed25519 B2veVw GeSb9ZgzHNDDDa/X+HppmefkEelg6JaQr8uaaijjzFo +LRzUrcmZAEosn0Sf4/YOLhbtdgYhWMYe9/uhvAMwcRI +-> ssh-ed25519 IFuY+w gmfb2WEjP2BVhwnL+DzFcsM/ctbihlC6wOr7Bhn8r0o +k4IEjoNZSukZtz+rkOjk/BfaZkJ7T1jNrweKpmGDRZU +-> ssh-ed25519 rA7dkQ EWcPrbtHeD6Rq0mlnoVhgVTZQ586QdRVsZa1K9YkQzk +EN5VG0U1KGdpcT64B6C7kVDwKM/h+gsiTgsKf11XP2s +-> ssh-ed25519 GKhvwg jVotsPuVgxUaZUg5U6QwZO9O6DPsYv5Mp1rfsP353hQ +c8uSgREFANKYeaafurp47MQiGnQxHXkFR5TGAQ7Ykv4 +--- unx7yN4JzSSku/QUYEEUSPxyyLrWLG4zEMB/yRqvKwg +FETAms~_'%r=KxO#Mq'M_5F%P. \ No newline at end of file diff --git a/secrets/ntfy-niko-pass.age b/secrets/ntfy-niko-pass.age index c42dcd5..5802533 100644 --- a/secrets/ntfy-niko-pass.age +++ b/secrets/ntfy-niko-pass.age @@ -1,7 +1,9 @@ age-encryption.org/v1 --> ssh-ed25519 84j9mw 5fEqoBEGZ6AZRfWuU6mej6XNl6hDrxMIMMlccp9CVzg -QvontdV2/amh/i1Ldmzup8TB+lN4b0+YuoT+UFWiPw8 --> ssh-ed25519 GKhvwg 5Qm1FPvbv0ZsJiJ0Rjm0CPm6eWKvfQ4XHAOmEUWWCiA -eu1MXEWfo425lbnq5tAOnGqpLgRVIOCkZKegTQQjw/I ---- s1g2UCKwlew0wCJSxGosBzn1K0TEbPlrIl09iZ58bMg -P$N{LrxS:=Wxc(J|48S \ No newline at end of file +-> ssh-ed25519 84j9mw ryWkCbg6qUwncq/HkEIN8qgMjPKVRv86y/gzJFtlS0U +G02X9Uacg0c5acyAmPHx5F6ImZQnjs45hH/tBFpP42I +-> ssh-ed25519 GKhvwg LcIGEajShma720zp/yMndBnEOoZV9aYSsOFmN6yG9wQ +lox/ZbORF9HCKl4lCkTrRQ240JEGljqoAf8+I5q03Z4 +--- 6a1rHleD/+yh+e+/0lm4TIvst9tjT7y6sr6ujApYuZQ +$Q~C7|A{3]&X'' +PRL6 +QYmhm \ No newline at end of file diff --git a/secrets/paperless-pass.age b/secrets/paperless-pass.age new file mode 100644 index 0000000..049b54e --- /dev/null +++ b/secrets/paperless-pass.age @@ -0,0 +1,7 @@ +age-encryption.org/v1 +-> ssh-ed25519 rA7dkQ sXPoNSctxQL6Gh1JrsMuUGp5/PW/v7zFzGzdncnVYnQ +ETOeRcPPhV+RZSZEC2cGsKm2H6eAn8eKJTn1NkJqndQ +-> ssh-ed25519 GKhvwg DWV3js/l+CYRHGgf0NCZwBCigE9U5tf8mkGxVNAIVSY +dxHnQkWKB8+02j3zuaeGVq8+A5vA2ssTccTdFSn5FCw +--- pu5uE5bsrnA7KrZSRGaD6xMKjzsx0ezXn9BbNVsrgAw +Q BV5D!Tt7nn1c1gI0sdI37M0r(+YjRnBxVC#` zGFMKbd0uW*fU9Xxo_?uQP?(8@hl{heQATJ$io3UeX+?--NqIr0kFQsf1(&X!LUD11 zZfc5=si~o*LXo3+N_L=vab$>*hl_iNSCU6@QB_r1a($XtRf)HWtAA-qxO+-~XGU^m zW`ReBo0D@fS4Npxj-P+Ac4eSjwntuRRYVPPLY+CRV9T%6{clLMcTQJT)Mit3MIvr zJ{}f6#m=S?`jH{U`sP*XQB{6Lp*~erNhVo^K?Om6z6JUwg+}g?T%8%0*uI{=bKx+n z#1ltH`6qUl88h#!P4xTjX!N(XNH1PA_4eFX*8crLZfb9v?@VXDzcgzC!>hYL-5Kjj lsvl;GZ#ZRs=TFM_S-p!*uYa8T*3BuV=6UgfwA2lE4FMPJsL}uc delta 325 zcmaFG{D*0RPIzIcV|I2yR+ei>rB9-PXH;5Ju0^GnQGS7olT&eCdQwr5UsidkfswmG zF;{khtG7#4xMx~%c6we^WRSK&PI`&6cVU@s^={rp zuI|MZrnvzb;dzCoWq#>y=@q^fhGu1EQI770W(Bz^rP-xU;Vv$rT!py-L1m6cNht>5 z#(_COW*HVvKF<37+7VeH1qKFXkr80H7>6#|YMYU?<;XZ-hwZJi(Db7Rxh z9XYXE#n%|vInS^4vf6Htw{OD+HfHBpuFsApK9+e9wxynB3A13*1zshll;7ewv{xS9nxjx<#f@rg^Surlng>NPvH2Zfb#XVO5g1QKoBYYN(5oX=s{bRaCYo zm#(g^LW*~Qhm(6qQlv?cYpGejbCrv6K~`i`Mx=?4nQNv+VQP?TvA#)4rDuRAm$9}X zW5T!MmY^?A%l@-icARa9`nYuQhT`u(@*MQF6v`BKy$Z3Lp74LynXAoAORBmRCrYi# td4AtJ(Eae_m`|7P-+OdoTf4K|#%K0RZPWj})cxJ{lA-f%*LhKg+W_zGg75$U delta 345 zcmeyv^oMDJPQAaWd1-dBdsU^gk$+NErMY8dwuPBXo~v7+Uqp$Cak{BdXsiD7dNrah^qnTq#Sz1+bu6I>#Myk1Gvaw69duTvWB$uw8LUD11 zZfc5=si~o*g1dJ{S$Vobv2l1*KxVc@iIIUxx`|UxMSX!sYH&fGkBPo#y05lZN@{k5 zS7e2`t6Nw;m!CmEWl^f3OL?Y`TfT`$sH;V=n@g@=Ubd@AgjY#&rAJzxnQ^jjPM}vl zm#(g^LU=$ETY~-@Yp0Z5y*#Blf3IN}cd^-RD diff --git a/secrets/secrets.nix b/secrets/secrets.nix index b04e231..c36fbb5 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -65,6 +65,7 @@ in ]; "rab-lol-cf.age".publicKeys = [ keys.system.kazuki + keys.system.youko keys.other.bootstrap ]; "rabulinski-com-cf.age".publicKeys = [ @@ -88,4 +89,8 @@ in keys.system.ude keys.other.bootstrap ]; + "paperless-pass.age".publicKeys = [ + keys.system.youko + keys.other.bootstrap + ]; } diff --git a/secrets/storage-box-creds.age b/secrets/storage-box-creds.age index 31a18e7..8d11012 100644 --- a/secrets/storage-box-creds.age +++ b/secrets/storage-box-creds.age @@ -1,7 +1,8 @@ age-encryption.org/v1 --> ssh-ed25519 84j9mw tKQQB/cd6JHCLQLrix2WGW5hHBUNC+pqDZXvTmOlOkw -lnx4olU3W8dgMwigYga/NYcjJ/C59J/uVdYNOfWmN2I --> ssh-ed25519 GKhvwg iWTl/jvU1aBd78yAZUsOgcG6JaK+vO8Dpx61dYMjmhc -2Iu6OHlLlhJLy/cxI/zSuqRhBnoeGLXINbDyMIvDZD8 ---- eOl0sze0EOvfcAarBav7mb4B3jdBvOE+fF166oukbrk -!lxq*T,.Xk6^ ssh-ed25519 84j9mw MkIkHSzR3H+j9ul56t+CrVsoeGRgH2ocYRSBoH/z5SY +0LNQmCBPvS5NiS66HCQ1Yifr/GkIYxrDj2Kfg/ZOerM +-> ssh-ed25519 GKhvwg xp5j84RKQ56OFSak3IvHRG9TAv0XVYLmWJLImgAjmws +gx1Ke3U3ngFsDswVVOnwbQUJNOUSdFgh/LUKkDH30Ug +--- lWb3NlBy8n+NWGQ+M75RmWElXXLWWpl38aRYTVMm5GY +qA [VpH 0I *~h 6BZikʤV 9s; +Ƴ8Md٬լ= \ No newline at end of file diff --git a/secrets/storage-box-webdav.age b/secrets/storage-box-webdav.age index 6019090..782f202 100644 --- a/secrets/storage-box-webdav.age +++ b/secrets/storage-box-webdav.age @@ -1,8 +1,7 @@ age-encryption.org/v1 --> ssh-ed25519 84j9mw C3TpEZsxJIYJ3d5vsQkCcCTity80nLsyxm5zCBZOMzk -56z54taf+KUJjDugfCGKlcbeRZfDzi3+eeanKPINS6E --> ssh-ed25519 GKhvwg uUXJkGw54Q7dCnYobwV1zihOPa4R1FydJZehlFc5MA4 -6Zbym9jLykqsYjmb6rKIa6GExAKVVvEkvCQrzl6HB/M ---- QICnyH0PORBpoNgT3pjuhP1p8AHn9gD2OIae/9G23x8 -(}{Ԝ2˓i]UmiLmv>ke'6A̯Xi<:fU)~&Aˡj# -D?_E-H \ No newline at end of file +-> ssh-ed25519 84j9mw aSPnpUfj2PBYycEMzcENn30pzhrSEAatTOdoDhoPQVk +PzcdoYgIHJZqOHE36gynF7r1LgFjoX2hEfCf1Emb2gg +-> ssh-ed25519 GKhvwg HlibITP17XIxE8t8Kd9NtC6n696fQJu78lE3Yp4lFyg +hmPEscf5AzMWq7NJSX8WxuRZ3bV3nMDAZZnZ8/Xy+rg +--- gSATPThFb4g1a+5/hwps5NGAEsd3VUlYtzy0vTySXyM +gۏlw_0](t9%9aWͬ@dW@S o*&X-@c~#fox=; \ No newline at end of file diff --git a/secrets/ude-deluge.age b/secrets/ude-deluge.age index f398be0..075061e 100644 --- a/secrets/ude-deluge.age +++ b/secrets/ude-deluge.age @@ -1,7 +1,8 @@ age-encryption.org/v1 --> ssh-ed25519 IFuY+w ZigoLhwVERGG/r7uYI3DKX7jijKt+4tsiTWpbIdUTXE -k4jmQIJXr7yJOY3pkc1VnoqDgWkNr84k1AgYF7jNjRs --> ssh-ed25519 GKhvwg FMZOLDeE2Yw1Kd8V7NTL2oQtWo4IKDUoHu/Z8Su2hHI -QF+L/Qf35wkOcgGWWRGANMJCG5Vz80epjQuwa4IdYQM ---- ZUTRNDrgxdsZsNSP1Z3BLxw4EYexr873aJrbUvIgE2I -yZͪ MXd塸*5j"*ZU ф|ݕ]a8 "Zb][9SU . \ No newline at end of file +-> ssh-ed25519 IFuY+w YhrlFN7mVaYlDC0YyEYwHUw/Dn+AJS5LcdYH0CHNhHM +2Fh1Imyut/Fs3nAUQAYNHuR0DPRCnDDv0fuLI1hQc6k +-> ssh-ed25519 GKhvwg Iuw+N1SD8On8HqpoinMoXFJ+QRS7CRyjVHhI7LE83hs +yTdsv1DKQUSG1hFyxanahMiagPumuuVH1S1uLwoX3aU +--- fGCYe4oLn1ucgnXuuecwD4nHMkiqxy2kSTYp79y7sR4 +ѭ +QVCs`ʦWG#u͑+K~!:#'jQDYz'%@AO`剒> \ No newline at end of file diff --git a/secrets/youko-niko-pass.age b/secrets/youko-niko-pass.age index 6e910ff..18041a5 100644 --- a/secrets/youko-niko-pass.age +++ b/secrets/youko-niko-pass.age @@ -1,7 +1,7 @@ age-encryption.org/v1 --> ssh-ed25519 rA7dkQ ucrMqUlwttyHHFkJ/c5tYpHohefNYe6aJnxHMUjkUxU -RgsGaMLmtziGu/n6MiDJmkTZORTh2yYWoSS0eu9i6PA --> ssh-ed25519 GKhvwg u7Fjda07e17aJGV0ZFK/Mt2ZbF/3b38MLydE8WKs2gY -gO2rNP64Nkhr5GShWP8zhxeT2YUKEkqN1Oc6/3l6PKU ---- H9oqwkU/uI5fZAdy+qkCW5vw1PBaahe28FTUxhEFsds -xSmL69ʎG3<4[Z t}<OdcY}>XQ^]Ki|BwDmqHX]FeRt%`Ҥ0IV \ No newline at end of file +-> ssh-ed25519 rA7dkQ HZF6g+17SHv2P0Agh9/rJk5yQkjqxmOKF+F5dlcHkUI +WimAhXL0UU2JXUlruPnIwi7vkjQ7YDWsyK5yB006gWo +-> ssh-ed25519 GKhvwg mYJ6EJxisRlPtWzBqAsQXF4sivQP86rr03qIQvJGumY +Y+dGZb/F1jddv04tFFPSSyTTJjsBTbQUocNg+FJuX/E +--- mMUDr1Q6r/fEIejP+0yBj8D09REx3bj51XpaJiOO4ns +iFP)emsURqYNc~EYs zBbR<*zL9f!gtOTAfANO-PgRC#e|XqrV;K)HT; zrB`Bsr%!f1m!D~NWT8b;s9TwdZ@OtvRG42tN`_lug`dB7MZT-MlWTdAXH}}Nab`q0 zm#(g^LaJY8P*I?FW~o75c$jxpUa)C?m8nT&rmv}^XS%OnvA<=QhlyvHWuSXGSHY3# z&(cMAg<4DxiZjvs_IaI<>dZqDOQdFeJg0d|*L_Chrr0LyAPEEBuumr*-;iT{DevCy RqulX$o0@lw+iQWcZvdb?aQgrN delta 319 zcmaFF^oVJKPJKzPzrJgcab%!(VxG2HUW&hGc|cOJe}!3Tc5Y!*NP2Esa$%UGe^f?b zD3^aliIclWRhe^gmP@&xuWxx(xPe7^x^rb&Nls{vd3t(TXqbU>X{dQ=GMBEMLUD11 zZfc5=si~o*g1dJ{S$VpGlV3rlk-tSmiEma!Vs>^~cD<#cQ>sBpVo*SiW3XjPRfcv! zrk7)Zt52RMS4m`WhDDy4WoBeWYG|=`o=KodqPKr)po?*oS$Rrox|6?=d7yh}k!i3a zm#(g^g12FEVT6HWWtEwCu192fS%9BwVMUgkez|r*ZfLq&mZ`HrQJICWMTTE77iWlC z7>{@UTnp_p%q!T%OJv#SrLdi5o*z4Z{|5$<-OujFl&3bfTz%7j*UD0Ow%%@+(}|3G ROJy&FEIO^e&du+_T>$^^aMJ() diff --git a/services/default.nix b/services/default.nix index dfee582..7597fc4 100644 --- a/services/default.nix +++ b/services/default.nix @@ -3,5 +3,6 @@ ./attic.nix ./forgejo-runner.nix ./forgejo.nix + ./paperless.nix ]; } diff --git a/services/paperless.nix b/services/paperless.nix new file mode 100644 index 0000000..31838f9 --- /dev/null +++ b/services/paperless.nix @@ -0,0 +1,61 @@ +{ + services.paperless = { + host = "youko"; + ports = [ 28981 ]; + config = + { config, ... }: + { + age.secrets.rab-lol-cf = { + file = ../secrets/rab-lol-cf.age; + owner = config.services.nginx.user; + }; + age.secrets.paperless-pass = { + file = ../secrets/paperless-pass.age; + owner = config.services.paperless.user; + }; + + services.paperless = { + enable = true; + dataDir = "/var/lib/paperless"; + mediaDir = "/media/paperless/media"; + consumptionDir = "/media/paperless/consume"; + passwordFile = config.age.secrets.paperless-pass.path; + settings = { + PAPERLESS_CONSUMER_IGNORE_PATTERN = [ + ".DS_STORE/*" + "desktop.ini" + ]; + PAPERLESS_OCR_LANGUAGE = "pol+eng+jpn"; + PAPERLESS_OCR_USER_ARGS = { + optimize = 1; + pdfa_image_compression = "lossless"; + }; + }; + }; + + services.nginx = { + enable = true; + recommendedProxySettings = true; + recommendedGzipSettings = true; + recommendedOptimisation = true; + recommendedTlsSettings = true; + virtualHosts."paper.rab.lol" = { + forceSSL = true; + enableACME = true; + acmeRoot = null; + locations."/".proxyPass = "http://localhost:28981"; + extraConfig = '' + client_max_body_size 24G; + ''; + }; + }; + + security.acme.acceptTerms = true; + security.acme.certs."paper.rab.lol" = { + email = "nikodem@rabulinski.com"; + dnsProvider = "cloudflare"; + credentialsFile = config.age.secrets.rab-lol-cf.path; + }; + }; + }; +}