claude'd better security things

2025-10-17 19:35:58 -04:00
parent 9e35448f04
commit f9515dd160
34 changed files with 327 additions and 144 deletions
--- a/services/llama-cpp.nix
+++ b/services/llama-cpp.nix
@@ -37,7 +37,7 @@
  systemd.services.llama-cpp.serviceConfig.DynamicUser = lib.mkForce false;

  services.caddy.virtualHosts."llm.${service_configs.https.domain}".extraConfig = ''
-    ${builtins.readFile ../secrets/caddy_auth}
+    import ${config.age.secrets.caddy_auth.path}
    reverse_proxy :${builtins.toString config.services.llama-cpp.port}
  '';
 }