Michael Hoang
0ec38c7919
vars: support secrets for partitioning the disk
2025-01-21 11:13:51 +00:00
clan-bot
72ca99e2c7
Merge pull request 'Migrate borgbackup module to vars' ( #2741 ) from pinpox/clan-core:migrate-borgbackup-vars into main
2025-01-16 12:16:37 +00:00
Pablo Ovelleiro Corral
7a17a04698
Migrate borgbackup module to vars
2025-01-16 13:14:24 +01:00
Jörg Thalheim
f55b02e1c9
remove flip functions from sops code
2025-01-15 13:59:49 +00:00
Johannes Kirschbauer
2c41e9f0c6
Chore:_migrate 'machineName' to 'settings.machine.name'
2024-12-31 14:55:50 +01:00
Johannes Kirschbauer
318a4f2d86
Chore: init settings submdule, move clanDir into settings submodule
2024-12-31 14:18:09 +01:00
lassulus
d91f653a65
vars: allow setting files as needed for activation
2024-12-19 13:05:05 +01:00
lassulus
4b63296d5f
vars sops: passthrough neededForUsers
2024-12-03 23:54:21 +01:00
Jörg Thalheim
e250332f4b
fix sops deprecation warning
2024-12-03 11:13:17 +01:00
lassulus
c00ac4a246
vars: remove secretsUploadDirectory from common module
2024-11-28 16:38:06 +01:00
Jörg Thalheim
56bb9c4c5a
vars: move owner/group to a sops namespace
...
we want to allow users to use this feature but do not want to use this
option in our own module because it's not supported by password store.
2024-10-31 12:10:57 +01:00
Louis Opter
f540ab91a1
vars: add the user and group options on files
...
This changeset forwards the ownership control options from sops-nix.
2024-10-23 09:05:53 +00:00
DavHau
53592837a9
vars: get rid of meta.json
2024-09-12 16:52:44 +02:00
DavHau
3c27cc31e9
vars/sops: load sops info from nix instead of filesystem
2024-09-12 16:30:21 +02:00
DavHau
8efcd65bed
vars: global metadata paths for all store backends
...
This also changes the paths where sops stores teh secret -> all sops secrets will have to be re-generated
2024-09-03 16:30:01 +02:00
DavHau
ec055f7606
vars: introduce deploy=true/false for generated files
2024-09-01 14:32:46 +02:00
DavHau
1a27bfa8a8
Reapply + Fix "vars: fix - upload machines own secrets only"
...
This reverts commit 0cd29daf88
2024-08-23 15:42:46 +02:00
DavHau
0cd29daf88
Revert "vars: fix - upload machines own secrets only"
...
This reverts commit 2a8958f494
2024-08-21 14:59:05 +02:00
DavHau
2a8958f494
vars: fix - upload machines own secrets only
2024-08-21 14:47:41 +02:00
a-kenji
6130505177
vars: fix using vars module with multiple machines
...
This filters the secrets to only include the secrets managed under `per-machine` and `shared`,
otherwise new deployments will fail, when using the vars module for multiple machines:
```
[vyr] /nix/store/[…]sops-install-secrets: failed to decrypt '/nix/store/[…]/sops/vars/per-machine/draper/garage/admin_token/secret': Error getting data key: 0 successful groups required, got 0
```
This doesn't fix all the edge cases with this approach.
We get a similar error if we deploy shared vars that are not
encrypted for our machine key. This needs to be addressed when
implementing the shared vars functionality.
2024-08-17 14:00:56 +00:00
DavHau
b2646aa0fe
tests: improve testing framework for impure vm tests
...
Also fix computet sops secret paths for vars
2024-08-04 13:40:12 +07:00
DavHau
2155675fc6
vars: fix bug when computing taarget path for sops
2024-07-29 12:09:59 +00:00
DavHau
a5065a1936
vars/sops: fix loading of vars from directory structure
2024-07-29 18:01:26 +07:00
