nix
/
lib
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fuckin ensure the dir exists for secrets

This commit is contained in:
niten 2023-06-06 14:34:58 -07:00
parent 179dda3ec6
commit bae4f4ddef
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
lib/fudo/secrets.nix
View File

@ -44,6 +44,16 @@ let
serviceConfig = { serviceConfig = {
Type = "simple"; Type = "simple";
RemainAfterExit = true; RemainAfterExit = true;
ExecStartPre =
pkgs.writeShellScript "fudo-secret-prep-${secret-name}.sh" ''
if [ ! -d ${dirOf target-file} ]; then
mkdir -p ${dirOf target-file}
chown ${user}:${group} ${dirOf target-file}
chmod ${if (group == null) then "0550" else "0500"} ${
dirOf target-file
}
fi
'';
ExecStart = ExecStart =
let host-master-key = config.fudo.hosts.${target-host}.master-key; let host-master-key = config.fudo.hosts.${target-host}.master-key;
in decrypt-script { in decrypt-script {