nix
/
nixos-config
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Switch back to strings for secret files (no copy to nixstore)

This commit is contained in:
Niten 2021-04-22 12:20:03 -07:00
parent cb0baaade8
commit be5708c1fd
3 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
config/host-config/limina.nix
View File

@ -61,7 +61,7 @@ in {
secrets.limina = { secrets.limina = {
backplane-client-passwd = { backplane-client-passwd = {
source-file = /srv/secrets/backplane-client/limina.passwd; source-file = "/srv/secrets/backplane-client/limina.passwd";
target-file = "/srv/backplane/dns/client.passwd"; target-file = "/srv/backplane/dns/client.passwd";
user = config.fudo.client.dns.user; user = config.fudo.client.dns.user;
}; };

6
config/host-config/procul.nix
View File

@ -73,19 +73,19 @@ in {
secrets.procul = { secrets.procul = {
backplane-client-passwd = { backplane-client-passwd = {
source-file = /srv/secrets/backplane-client/procul.passwd; source-file = "/srv/secrets/backplane-client/procul.passwd";
target-file = "/srv/backplane/dns/client.passwd"; target-file = "/srv/backplane/dns/client.passwd";
user = config.fudo.client.dns.user; user = config.fudo.client.dns.user;
}; };
postgres-keytab = { postgres-keytab = {
source-file = /srv/secrets/kerberos/procul-postgres.keytab; source-file = "/srv/secrets/kerberos/procul-postgres.keytab";
target-file = "/srv/postgres/secure/postgres.keytab"; target-file = "/srv/postgres/secure/postgres.keytab";
user = "root"; user = "root";
}; };
gitea-database-password = { gitea-database-password = {
source-file = /srv/secrets/gitea/procul-database.passwd; source-file = "/srv/secrets/gitea/procul-database.passwd";
target-file = "/srv/gitea/secure/database.passwd"; target-file = "/srv/gitea/secure/database.passwd";
user = config.fudo.git.user; user = config.fudo.git.user;
}; };

2
lib/fudo/secrets.nix
View File

@ -57,7 +57,7 @@ let
secretOpts = { ... }: { secretOpts = { ... }: {
options = with types; { options = with types; {
source-file = mkOption { source-file = mkOption {
type = path; type = str;
description = "File from which to load the secret."; description = "File from which to load the secret.";
}; };