main
nix 28 lines 651 Bytes
Raw
1 {
2 config,
3 ...
4 }:
5 {
6 services.limesurvey = {
7 enable = true;
8 encryptionKeyFile = config.sops.secrets.limesurvey-encryption-key.path;
9 encryptionNonceFile = config.sops.secrets.limesurvey-encryption-nonce.path;
10 webserver = "nginx";
11 nginx.virtualHost = {
12 serverName = "survey.nixos.org";
13 enableACME = true;
14 forceSSL = true;
15 };
16 };
17
18 sops.secrets.limesurvey-encryption-key = {
19 format = "binary";
20 sopsFile = ../secrets/limesurvey-encryption-key.caliban;
21 };
22
23 sops.secrets.limesurvey-encryption-nonce = {
24 format = "binary";
25 sopsFile = ../secrets/limesurvey-encryption-nonce.caliban;
26 };
27
28 }