nix
/
lib
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Make secrets work again...

This commit is contained in:
Niten 2023-10-09 11:35:45 -07:00
parent db5c0b7cd1
commit 7fcbc0bddb
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
lib/fudo/secrets.nix
View File

@ -39,7 +39,7 @@ let
{ source-file, target-file, user, group, permissions, ... }: {
description =
"decrypt secret ${secret-name} at ${target-host}:${target-file}.";
wantedBy = [ cfg.secret-target "multi-user.target" ];
wantedBy = [ cfg.secret-target "default.target" ];
before = [ cfg.secret-target "multi-user.target" ];
serviceConfig = {
Type = "simple";
@ -60,8 +60,9 @@ let
inherit secret-name source-file target-host target-file
host-master-key user group permissions;
};
ExecStop = pkgs.writeShellScript "fudo-remove-${secret-name}-secret.sh"
"rm -f ${target-file}";
## This is too aggressive about 'stopping'
# ExecStop = pkgs.writeShellScript "fudo-remove-${secret-name}-secret.sh"
# "rm -f ${target-file}";
};
path = [ pkgs.age ];
};