nix
/
lib
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

This is just tweaking at this point...

This commit is contained in:
niten 2023-10-09 22:58:42 -07:00
parent 169cf84263
commit 1e5cdcba79
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
lib/fudo/secrets.nix
View File

@ -39,9 +39,9 @@ let
{ source-file, target-file, user, group, permissions, ... }: { { source-file, target-file, user, group, permissions, ... }: {
description = description =
"decrypt secret ${secret-name} at ${target-host}:${target-file}."; "decrypt secret ${secret-name} at ${target-host}:${target-file}.";
wantedBy = [ cfg.secret-target "multi-user.target" ]; wantedBy = [ "default.target" ];
requires = [ "local-fs.target" ]; requires = [ "local-fs.target" ];
before = [ cfg.secret-target "multi-user.target" ]; before = [ cfg.secret-target ];
after = [ "local-fs.target" ]; after = [ "local-fs.target" ];
serviceConfig = { serviceConfig = {
Type = "oneshot"; Type = "oneshot";
@ -57,7 +57,7 @@ let
fi fi
''; '';
ExecStart = ExecStart =
let host-master-key = config.fudo.hosts.${target-host}.master-key; let host-master-key = config.fudo.hosts."${target-host}".master-key;
in decrypt-script { in decrypt-script {
inherit secret-name source-file target-host target-file inherit secret-name source-file target-host target-file
host-master-key user group permissions; host-master-key user group permissions;