Adding mongodb

configuration.nix

@@ -140,6 +140,7 @@
     "dedyn/dnsuser" = {};
     "github/token" = {};
     "gitlab/token" = {};
+    "mongodb/initial_password" = {};
     "namecheap/ddyn_password" = {
       restartUnits = ["ddclient.service"];
     };
@@ -401,6 +402,12 @@
     openFirewall = true;
   };
 
+  services.mongodb = {
+    enable = true;
+    package = pkgs.mongodb-7_0;
+    initialRootPasswordFile = config.sops.secrets."mongodb/initial_password".path;
+  };
+
   networking.interfaces.enp6s0.useDHCP = false;
   networking.interfaces.br0.useDHCP = true;
   networking.bridges.br0.interfaces = ["enp6s0"];

home.nix

@@ -95,6 +95,29 @@
     syntaxHighlighting.enable = true;
   };
 
+  sops = {
+    age.keyFile = "/home/mask/.config/sops/age/keys.txt";
+    defaultSopsFile = ./secrets/secrets.yaml;
+    secrets = {
+      "github/token" = {};
+      "github/username" = {};
+      "gitlab/token" = {};
+      "gitea/token" = {};
+      "gitea/password" = {};
+      "gitea/username" = {};
+    };
+    templates = {
+      ".git-credentials" = {
+        path = "${config.home.homeDirectory}/.git-credentials";
+        mode = "0600";
+        content = ''
+          https://${config.sops.placeholder."gitea/username"}:${config.sops.placeholder."gitea/token"}@git.centraldogma.site
+          https://${config.sops.placeholder."github/username"}:${config.sops.placeholder."github/token"}@github.com
+        '';
+      };
+    };
+  };
+
   programs.git = {
     enable = true;
     settings = {
@@ -104,8 +127,11 @@
       };
       alias = {
         #Add and commit
-        ac = "!git add $1 && git commit -m '$2'";
+        ac = "!git add $1 && git commit -m $2";
       };
+      # credential-helper = {
+      #
+      # };
     };
   };
 
@@ -128,13 +154,4 @@
   };
 
   programs.home-manager.enable = true;
-
-  sops = {
-    age.keyFile = "/home/mask/.config/sops/age/keys.txt";
-    defaultSopsFile = ./secrets/secrets.yaml;
-    secrets = {
-      "github/token" = {};
-      "gitlab/token" = {};
-    };
-  };
 }

secrets/secrets.yaml

@@ -7,10 +7,12 @@ factorio:
     service_token: ENC[AES256_GCM,data:qydcvSgSdu1G+tGF5/yS8UAxYFxhEMcL2jw1lXyR,iv:Zc4TtArTB0FAcaMcN7pU8o21jdAZdhphwIS9UsbaKpk=,tag:rfTVLNNlXKcvXvEc+c0Hrg==,type:str]
     gamepassword: ENC[AES256_GCM,data:jKfiINlNE5DITQ==,iv:+sAfRJRRgW1Gec59zV0rDue11+OD7CFhM+9Jia2oZI0=,tag:AUiQXhrFuitJyObbZI9umg==,type:str]
 github:
+    username: ENC[AES256_GCM,data:1ad/B9EnHim1vg3Vgw==,iv:c6VVRwYHNtUdERhYj4gk2Azks8iZ4SkXPLsnOyiI8g4=,tag:wLtOtbySOKYv7Aut3j6iNg==,type:str]
     token: ENC[AES256_GCM,data:ke1DF7fhotXL0Grbm1HvqeUhlJcOTFXfSH5PFBf249CUYYz49ZH5eA==,iv:j6Ahz6AsOhujf0K1TMIVdVxUneUtJmmAHimOg9Foy5g=,tag:6B/a/+CQ+qxWPRkGvjqcng==,type:str]
 duplicity:
     passphrase: ENC[AES256_GCM,data:2pja+bXmndi+bSae1B5f3rH0/ZRpIBBgIFKR9Vfgsvo2Vgd4FoI8WhVDYYRqIQ==,iv:AL2vVhM9EAdMyPhic5UV7iPZIG8X37Jtr22+v5AFP/o=,tag:HY9oaQTC2WWKUkqfUUOdlg==,type:str]
 gitlab:
+    username: ENC[AES256_GCM,data:SPDJfn7NJDJP5hQ=,iv:xLAjm+pM8sFT6tiianNDm/D8S8Of8dLxQl4y9I3vWWU=,tag:N0jXEbFFwurQLYUFfjEGxQ==,type:str]
     token: ENC[AES256_GCM,data:od35ZBgqCGZPYZDsTAndK+o5pahEWN7hTSm9FB6hvAr7IguuQvoIiBR+uc+MDe3a0QiSnhpOOaE8hwQo3u0=,iv:Wc1SbSF2G4JZIHYwakdCom1lOHUczxKYYzUjTmIsJKE=,tag:Auv6V2OdWU6rqReMzgEhbg==,type:str]
 github_token: ENC[AES256_GCM,data:G+0yjjphqXiSSi+7YrhIWaRLXJw9c0AHQnmWb3NVCpvBz0xWmXnYHw==,iv:1duT9LC0C+cZA3Xi07NxDsCQiUDv7eoL+bO60lr2tkQ=,tag:57j06/mtQH/pZAeo48al3A==,type:str]
 gitlab_token: ENC[AES256_GCM,data:Eej/KLFtxJ/zotoVlh8wuw14OLR4jInY1vK+ZOYPaa70ZZOJet5M4+in6DI8oulWZvR+a9TbPeRIFCAivSQ=,iv:YKsI/PO5ITT8XBIMo0EslraR/fzl+3I4n7JWoUuJcdg=,tag:kZ0uamAuW+Q6EUzCT1VWrQ==,type:str]
@@ -22,6 +24,8 @@ postgres:
     pgmasterpass: ENC[AES256_GCM,data:KYlzLRIV9jkbtbb8O8EiTXXYP+cPwYkV+WEse1T+grd5kPpl/xxAqAOIc44UcfQ8+FJMFpBe,iv:kWHbvoeLznuESsvKx5ADrPGGxVYVRMlRL3XUjr92+fU=,tag:dK2gii+lxVM7+Y++1eR5ZA==,type:str]
 pgmasterpass: ENC[AES256_GCM,data:s3KOZiag7h3iFYxBxXnhyYQ6ZG9jdav4uM9bQHgXdpYZW4yircOgoI1YiuciDoF1RhdOjbNh,iv:KzblpETo/wQtYUJUALAyvPRDlbuxXPiGOBhgJpVJd/8=,tag:Z5f7UhWNtn060UUm+/owqg==,type:str]
 gitea:
+    username: ENC[AES256_GCM,data:LEcU7zX0w16D,iv:4WDBdArQstkg4fRAgEFYIqKIZ1Kdyt21PrHP4pvvFqM=,tag:1t7a2bGHW6LKLeSiUmsjGA==,type:str]
+    token: ENC[AES256_GCM,data:y5Wzuti/kjK10auc3jlddoWKnudfRA1UosfKzeD8IWljauhfCUCMKw==,iv:ygFxVBm5gQjDX4oIjeWpzrLsJ/ts6Po1+n9bDf3nNHY=,tag:8BsOUvwvSNi/Zo2T2jbjAA==,type:str]
     database: ENC[AES256_GCM,data:AiYQyrsmFVlWSYO+YFFgrCSTGTn3nl2tH+YcXlQKsLGJeNtTt1WV0/VvNuo=,iv:XZhZi183po9Mp8hAvSpti5qWec5+Rwu+UFPEUplZv0I=,tag:IFT/oP9Unwk+RE9sBLjJGg==,type:str]
     password: ENC[AES256_GCM,data:6GKcqsdLXaHVJODuuz2sZSZDn/0U1vT9NTfeuNlhwGO6MrQ9QYaOlpU3AI8=,iv:TL1EQnLXgXeenp0CqNAOajq4g66Spl1JLgPP3i4OpQc=,tag:9jPCAGR6zxKl0tzMeXWsGA==,type:str]
 caddy:
@@ -39,6 +43,8 @@ dedyn:
     dnsuser: ENC[AES256_GCM,data:P++O0d6Xu7fcylYZ,iv:MrXtbicDb+nJY4WdbyEKzyn/OeCYapa1WuclqA6+S3A=,tag:aKV2yHRw74HN9J1qHD1iVw==,type:str]
 namecheap:
     ddyn_password: ENC[AES256_GCM,data:kWYdgXnwdmAErHLpEU7CSbUYoIipv+F8rTCAxR2gAuk=,iv:4O5ngC/au+mTMXrzd+x8Jn+OB608QqE7Y4sRTDPvvCY=,tag:NxsK+LrZi6nYjRVvv+PRlQ==,type:str]
+mongodb:
+    initial_password: ENC[AES256_GCM,data:3Jih05JKK9BbKVl1qAFJFCtfX3qUpnwO01Xxi1ZlydbbyPtiT0ROVCZPUa0qN0M=,iv:TsGNGxpFIOpRaUGSYY7KO6/zvM20rTswpKIq/4QaPwg=,tag:tbA6Q6O7TI+S7uA1iRyOow==,type:str]
 sops:
     age:
         - enc: |
@@ -50,7 +56,7 @@ sops:
             OXJfnqQIRsiwQJFNLDjB4hNZ5r9iupVj66BAbadO3pwlHWOFt6+PaQ==
             -----END AGE ENCRYPTED FILE-----
           recipient: age1xgfxwt7488dkpksgjawc53ewsc4p94jy6kdvnpd5r0jv5a5yr9tqzxy8x2
-    lastmodified: "2026-09-14T10:21:43Z"
+    lastmodified: "2026-09-15T04:02:30Z"
-    mac: ENC[AES256_GCM,data:rCIlQV0lfuJl+E0t4Y5IvOFxToL4+47IfMzIm7V7eq3aoj13nv8g+2k2yZncV22shjJppasvyis7u6KtFsvDNkmc+VdduiuB3vBKNkBOr3IRwtOhvzqIHyvTeN9xsy/cGmrASr661jnM8aruMOMoevsyF1LMO/f15QzS/grUOlc=,iv:dZnCqRSXMeDvv/f4vekEqu9hPvl62Vzid0HZfXTRs2k=,tag:ie90n1/kQGNZB98/5cNaRQ==,type:str]
+    mac: ENC[AES256_GCM,data:h92G5tOeUaD/nsx273vrh8INpS/S9mwQxrW3G0y26J+DC6in9GDYewbHrA5menlRWUCuiz6pomI75WZ2dAh7+YyWFyAOaxhNhF7GES355vMK5sEr+xn41yP6QXUcFBvU6p76Lv67QijtJIwQZuaycM2jNo7XXJtz7QDpr9T4Kcg=,iv:oLqFCAgLpPK/lq6NUE7ZtEoNY1GfaB5otJIrygdyOXs=,tag:+OwJRctOx7I1Rof3+MIutQ==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.13.3