fruchti/hosts
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Rupert, burp server: Use password files as well

Browse source
This commit is contained in:
fruchti 2023-03-12 15:41:36 +01:00
parent 01161228da
commit ff291dd912
3 changed files with 76 additions and 42 deletions
Download patch file Download diff file Expand all files Collapse all files

3
hosts/Rupert.nix
View file

@ -47,7 +47,8 @@ in
services.burp.client = {
enable = true;
password = config.services.burp.server.clients."${config.networking.hostName}".password;
passwordFile = "/secrets/burp_client_passwords/${config.networking.hostName}";
sslKeyPasswordFile = "/secrets/burp_client_ssl_key_password";
};
# Flatpak

32
hosts/burp-server.nix
View file

@ -1,32 +1,24 @@
{ config, lib, ... }:
let
definedInPersonalDotNix = lib.mkDefault (throw "Configuration option missing from personal.nix");
in
{
services.burp.server = {
enable = true;
dataDirectory = "/data/burp";
sslKeyPassword = definedInPersonalDotNix;
sslKeyPasswordFile = "/secrets/burp_server_ssl_key_password";
workingDirRecoveryMethod = "resume";
maxResumeAttempts = 3;
keep = [ 14 4 6 2 ];
clients = {
${config.networking.hostName} = {
password = definedInPersonalDotNix;
clients = lib.listToAttrs (map (client: {
name = client;
value = {
passwordFile = "/secrets/burp_client_passwords/${client}";
};
Pullach = {
password = definedInPersonalDotNix;
};
Disco = {
password = definedInPersonalDotNix;
};
Berthold = {
password = definedInPersonalDotNix;
};
Ernesto = {
password = definedInPersonalDotNix;
};
};
}) [
config.networking.hostName
"Pullach"
"Disco"
"Berthold"
"Ernesto"
]);
superClients = [
config.networking.hostName
];