add option to set defaultGroups for secrets

2024-02-16 17:03:14 +01:00
parent 052f040017
commit 023b9f4257
13 changed files with 84 additions and 12 deletions
--- a/nixosModules/clanCore/outputs.nix
+++ b/nixosModules/clanCore/outputs.nix
@@ -64,7 +64,13 @@
          '';
          default = pkgs.writers.writeJSON "secrets.json" (lib.mapAttrs
            (_name: secret: {
-              secrets = builtins.attrNames secret.secrets;
+              secrets = lib.mapAttrsToList
+                (name: secret: {
+                  inherit name;
+                } // lib.optionalAttrs (secret ? groups) {
+                  inherit (secret) groups;
+                })
+                secret.secrets;
              facts = lib.mapAttrs (_: secret: secret.path) secret.facts;
              generator = secret.generator.finalScript;
            })