b91158f454
One vars get lifted to the global scope, dependencies need to be structured differently, eg. categorized by instances
79 lines
1.8 KiB
Nix
79 lines
1.8 KiB
Nix
{ lib, ... }:
|
|
{
|
|
secretStore = lib.mkOption {
|
|
type = lib.types.enum [
|
|
"sops"
|
|
"password-store"
|
|
"vm"
|
|
"fs"
|
|
"custom"
|
|
];
|
|
default = "sops";
|
|
description = ''
|
|
method to store secret facts
|
|
custom can be used to define a custom secret var store.
|
|
'';
|
|
};
|
|
|
|
secretModule = lib.mkOption {
|
|
type = lib.types.str;
|
|
internal = true;
|
|
description = ''
|
|
the python import path to the secret module
|
|
'';
|
|
};
|
|
|
|
# TODO: see if this is the right approach. Maybe revert to secretPathFunction
|
|
fileModule = lib.mkOption {
|
|
type = lib.types.deferredModule;
|
|
internal = true;
|
|
description = ''
|
|
A module to be imported in every vars.files.<name> submodule.
|
|
Used by backends to define the `path` attribute.
|
|
'';
|
|
default = { };
|
|
};
|
|
|
|
publicStore = lib.mkOption {
|
|
type = lib.types.enum [
|
|
"in_repo"
|
|
"vm"
|
|
"custom"
|
|
];
|
|
default = "in_repo";
|
|
description = ''
|
|
method to store public vars.
|
|
custom can be used to define a custom public vars store.
|
|
'';
|
|
};
|
|
|
|
publicModule = lib.mkOption {
|
|
type = lib.types.str;
|
|
internal = true;
|
|
description = ''
|
|
the python import path to the public module
|
|
'';
|
|
};
|
|
|
|
# Legacy option that guides migration
|
|
passBackend = lib.mkOption {
|
|
type = lib.types.nullOr lib.types.str;
|
|
default = null;
|
|
visible = false;
|
|
description = ''
|
|
DEPRECATED: This option has been removed. Use clan.vars.password-store.passPackage instead.
|
|
Set it to pkgs.pass for GPG or pkgs.passage for age encryption.
|
|
'';
|
|
};
|
|
|
|
dependenciesType = lib.mkOption {
|
|
type = lib.types.raw;
|
|
description = ''
|
|
The type of the `dependencies` option.
|
|
'';
|
|
internal = true;
|
|
readOnly = true;
|
|
visible = false;
|
|
};
|
|
}
|