core password-store: define fileModule only if file is secret
This commit is contained in:
@@ -43,7 +43,9 @@ in
|
|||||||
clan.core.vars.settings =
|
clan.core.vars.settings =
|
||||||
lib.mkIf (config.clan.core.vars.settings.secretStore == "password-store")
|
lib.mkIf (config.clan.core.vars.settings.secretStore == "password-store")
|
||||||
{
|
{
|
||||||
fileModule = file: {
|
fileModule =
|
||||||
|
file:
|
||||||
|
lib.mkIf file.config.secret {
|
||||||
path = "/run/secrets/${file.config.generatorName}/${file.config.name}";
|
path = "/run/secrets/${file.config.generatorName}/${file.config.name}";
|
||||||
};
|
};
|
||||||
secretUploadDirectory = lib.mkDefault "/etc/secret-vars";
|
secretUploadDirectory = lib.mkDefault "/etc/secret-vars";
|
||||||
|
|||||||
Reference in New Issue
Block a user