haccfiles/modules
stuebinm a3a4264b38
Patch mattermost module to allow secrets outside the nix store
This adds a custom mattermost module (`services.mattermost-patched`) which is
identical to the one in nixpkgs except that it also has an option `secretConfig`,
which should point to a file containing all secret parts of the mattermost config
(e.g. mailserver password), and which is merged with the config genereated from
the module at startup time.

This allows us to have a (almost) immutable config without having secrets in the
nix store.

Before deploying this, add a secrets file at /var/lib/mattermost/screts.json
(on the host — there is a bind mount in place so we won't have to enter the
container each time to change something).
2021-03-17 23:00:44 +01:00
..
nftnat modules/nftnat: init nftables nat module 2021-01-15 23:55:06 +00:00
decklink.nix sources: switch to upstream 2021-01-27 22:06:56 +01:00
default.nix sources: removed immae-nix 2021-02-10 23:48:18 +01:00
mattermost.nix Patch mattermost module to allow secrets outside the nix store 2021-03-17 23:00:44 +01:00