yadunut/clan-core
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

move secret stores into clan_cli codebase

Browse Source
This commit is contained in:
lassulus
2024-01-17 18:00:30 +01:00
parent b5a12bc4ba
commit 1d4e533438
14 changed files with 135 additions and 250 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
nixosModules/clanCore/outputs.nix
View File

@@ -31,27 +31,10 @@
the directory on the deployment server where secrets are uploaded
'';
};
uploadSecrets = lib.mkOption {
type = lib.types.path;
description = ''
script to upload secrets to the deployment server
'';
default = "${pkgs.coreutils}/bin/true";
};
generateSecrets = lib.mkOption {
type = lib.types.path;
description = ''
script to generate secrets
'';
default = "${pkgs.coreutils}/bin/true";
};
secretsModule = lib.mkOption {
type = lib.types.path;
default = "${pkgs.coreutils}/bin/true";
type = lib.types.str;
description = ''
the module that generates secrets.
A needs to define a python class SecretStore which implements the following methods:
set, get, exists
the python import path to the secrets module
'';
};
secretsData = lib.mkOption {
@@ -82,7 +65,7 @@
# optimization for faster secret generate/upload and machines update
config = {
system.clan.deployment.data = {
inherit (config.system.clan) uploadSecrets generateSecrets secretsModule secretsData;
inherit (config.system.clan) secretsModule secretsData;
inherit (config.clan.networking) deploymentAddress;
inherit (config.clanCore) secretsUploadDirectory;
};