clan-cli secrets: deploy -> upload

This commit is contained in:
lassulus
2023-09-14 13:49:20 +02:00
committed by Mic92
parent 55fc055549
commit c5786614bf
7 changed files with 63 additions and 63 deletions

View File

@@ -68,9 +68,9 @@
};
}));
};
config.system.build.generateDeploySecrets = pkgs.writeScript "generate_deploy_secrets" ''
${config.system.build.generateSecrets}
${config.system.build.deploySecrets}
config.system.build.generateUploadSecrets = pkgs.writeScript "generate_upload_secrets" ''
${config.system.clan.generateSecrets}
${config.system.clan.uploadSecrets}
'';
imports = [
./sops.nix

View File

@@ -7,7 +7,7 @@ in
type = lib.types.path;
default = "/etc/secrets";
description = ''
The directory where the password store is deployed to.
The directory where the password store is uploaded to.
'';
};
config = lib.mkIf (config.clanCore.secretStore == "password-store") {
@@ -45,7 +45,7 @@ in
fi)
'') "" config.clanCore.secrets}
'';
system.clan.deploySecrets = pkgs.writeScript "deploy-secrets" ''
system.clan.uploadSecrets = pkgs.writeScript "upload-secrets" ''
#!/bin/sh
set -efu
set -x # remove for prod

View File

@@ -64,8 +64,8 @@ in
fi)
'') "" config.clanCore.secrets}
'';
system.clan.deploySecrets = pkgs.writeScript "deploy-secrets" ''
echo deployment is not needed for sops secret store, since the secrets are part of the flake
system.clan.uploadSecrets = pkgs.writeScript "upload-secrets" ''
echo upload is not needed for sops secret store, since the secrets are part of the flake
'';
sops.secrets = builtins.mapAttrs
(name: _: {