clan-cli secrets: deploy -> upload
This commit is contained in:
@@ -68,9 +68,9 @@
|
||||
};
|
||||
}));
|
||||
};
|
||||
config.system.build.generateDeploySecrets = pkgs.writeScript "generate_deploy_secrets" ''
|
||||
${config.system.build.generateSecrets}
|
||||
${config.system.build.deploySecrets}
|
||||
config.system.build.generateUploadSecrets = pkgs.writeScript "generate_upload_secrets" ''
|
||||
${config.system.clan.generateSecrets}
|
||||
${config.system.clan.uploadSecrets}
|
||||
'';
|
||||
imports = [
|
||||
./sops.nix
|
||||
|
||||
@@ -7,7 +7,7 @@ in
|
||||
type = lib.types.path;
|
||||
default = "/etc/secrets";
|
||||
description = ''
|
||||
The directory where the password store is deployed to.
|
||||
The directory where the password store is uploaded to.
|
||||
'';
|
||||
};
|
||||
config = lib.mkIf (config.clanCore.secretStore == "password-store") {
|
||||
@@ -45,7 +45,7 @@ in
|
||||
fi)
|
||||
'') "" config.clanCore.secrets}
|
||||
'';
|
||||
system.clan.deploySecrets = pkgs.writeScript "deploy-secrets" ''
|
||||
system.clan.uploadSecrets = pkgs.writeScript "upload-secrets" ''
|
||||
#!/bin/sh
|
||||
set -efu
|
||||
set -x # remove for prod
|
||||
|
||||
@@ -64,8 +64,8 @@ in
|
||||
fi)
|
||||
'') "" config.clanCore.secrets}
|
||||
'';
|
||||
system.clan.deploySecrets = pkgs.writeScript "deploy-secrets" ''
|
||||
echo deployment is not needed for sops secret store, since the secrets are part of the flake
|
||||
system.clan.uploadSecrets = pkgs.writeScript "upload-secrets" ''
|
||||
echo upload is not needed for sops secret store, since the secrets are part of the flake
|
||||
'';
|
||||
sops.secrets = builtins.mapAttrs
|
||||
(name: _: {
|
||||
|
||||
Reference in New Issue
Block a user