From 424e8355f9dbc8fabe0dde48ce2fd0a258f254a4 Mon Sep 17 00:00:00 2001
From: Paul-Henri Froidmont <git.contact-57n2p@froidmont.org>
Date: Thu, 9 Dec 2021 17:43:38 +0100
Subject: [PATCH] Configure dokuwiki users

---
 modules/dokuwiki.nix | 9 +++++++++
 secrets.enc.yml      | 9 +++++++--
 2 files changed, 16 insertions(+), 2 deletions(-)

diff --git a/modules/dokuwiki.nix b/modules/dokuwiki.nix
index 091f6d2..1cb31a7 100644
--- a/modules/dokuwiki.nix
+++ b/modules/dokuwiki.nix
@@ -1,10 +1,19 @@
 { config, lib, pkgs, ... }:
 let
   configureWiki = name: {
+
+    sops.secrets."usersFile-${name}" = {
+      owner = "dokuwiki";
+      key = "wiki/${name}/users_file";
+      restartUnits = [ "phpfpm-dokuwiki-${name}.${config.networking.domain}.service" ];
+    };
+
     services.dokuwiki.sites = {
       "${name}.${config.networking.domain}" = {
         enable = true;
         stateDir = "/nix/var/data/dokuwiki/${name}/data";
+        usersFile = config.sops.secrets."usersFile-${name}".path;
+        disableActions = "register";
       };
     };
 
diff --git a/secrets.enc.yml b/secrets.enc.yml
index f8c621b..af82a2b 100644
--- a/secrets.enc.yml
+++ b/secrets.enc.yml
@@ -8,6 +8,11 @@ murmur.env: ENC[AES256_GCM,data:bErJrzpPRrBhUeW113qt9xbJWsrxiI8YIibZ3l0=,iv:2dIl
 email:
     accounts_passwords:
         paultrial: ENC[AES256_GCM,data:fDGYNdu9DQcfheOkc5aixUGmHPrVh4/6JGAECwhl64zpxXqPQ/jqYoaOMz3o3wozF1g+ZOKdBd2daBm0,iv:nyz37z1gmKbdpBDRvEe/4l36+evh89kpgowNxd+KdE0=,tag:j6JWAXglSPtKqN0v7akrSg==,type:str]
+wiki:
+    anderia:
+        users_file: ENC[AES256_GCM,data:Zx5QTmtqqrRwbHUMiVFfvMnvzaLSlKiouOg57H+4RYS/5Zavl4y3Awswuiz9y7iRDGZhsxba6Ki3jEg/sSwlmB/hICQikQlRfsnx1ibAKeTv9A==,iv:R7vQBU/4thmBVcydHPNiwUOavkhl6OGEVL9WdexJzAw=,tag:FQ/9LjQ6c+ErAhH3erzOBQ==,type:str]
+    arkadia:
+        users_file: ENC[AES256_GCM,data:glllwv0+KnPOeJ4eFNXECZPZvL6k5RODxIJNfWjQgo8EUKF7UsVyRvHcL2g9TAEpXKT8RGLekZim+Q467eKKGPpdj2LlrI/XYPyMvk2ShaTBO2ivx+6e9zowpdJNclBMmtKGgggK+r7LeXGunCl06oq86LpKq9ddiX2zZnOfxU1b0ZAG+tmqSVfkgi7cOs5DGagSaco+2+SkCOGThahGquWMrPmVULO0Dz2w98+7uSbmFmXlJOOZjKCk/q0ou4Bi0gK6lQ8/fKleNJLJ0x8Vx0WPYZgz6109RkTYznMl2HSIZEcNp81PxQvr66Vumc8ZO+OXWbNyY064/LXFJB7sEA57r4ccHHkH5+FCKFQJzCA=,iv:Ki0MCTJ8jwogDNL71kiMY4EGrfBorxB2rpBJAid6QOQ=,tag:q/mfK3Dm0KFnK4AHjzsP7g==,type:str]
 borg:
     passphrase: ENC[AES256_GCM,data:RNUTb29sOdsg4KnB/0nIFGJFV/2nlMH4pxGFlgXdtTgDe2opT/moUg==,iv:6kdBeq+qFWnPB+N+zpKNdFkmkskOVMabdj8Uxk9QeQI=,tag:MxNqn5p9P0JpsjkNm9iYEQ==,type:str]
     client_keys:
@@ -26,8 +31,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2021-11-28T21:13:22Z"
-    mac: ENC[AES256_GCM,data:+FuqGDiCmui2F230m0ec/LFhmD5dvpbkn/Ov8fpuWo5WfZLkrn6Kb05F7CwiML2GFhQbw9G5Q07mlOkzoIOnTz+pxZhPE/JGRUREjyipPtu2T0UXbYb1E9LoO40lrrwYJ/5QLXKys1ozfXMhZ6cAP9P5evLmIb8j1P/KQ7y4lsI=,iv:iXw4QwK9N/gJQSU8sub69EZUdqaIflWbRohX8S1Xz2w=,tag:aUAIUSfVpzrymciKdJjUCQ==,type:str]
+    lastmodified: "2021-12-09T16:20:53Z"
+    mac: ENC[AES256_GCM,data:B52chrVaJle4mxgZEhH0ZFBXr305F8k07qRoyh6W9dPpJOzPaJ3jfhSyYCojV+AUYywgHPUTiXeG+RW6P0v/FLeeP0OldhHdepRzmACHglLflYQwmUZSXf9wlmQPsN4/Uy7Z0h6zTComJXUCwKe4W0FMn+szgkxa+qvQgnZhneI=,iv:ZNzXQncWR0Hnd8+kAABTVl2/jIH4nOUPXhfCFgXhjho=,tag:KDZShClqYbDpGB5hKYUsqQ==,type:str]
     pgp:
         - created_at: "2021-11-29T00:57:34Z"
           enc: |