uku/flake
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(secrets): add shared secrets

Browse source
This commit is contained in:
uku 2024-07-29 23:47:05 +02:00
parent 4c9b7ac9e2
commit 7efd6d5b84
Signed by: uku
SSH key fingerprint: SHA256:4P0aN6M8ajKukNi6aPOaX0LacanGYtlfjmN+m/sHY/o
8 changed files with 29 additions and 21 deletions
Download patch file Download diff file Expand all files Collapse all files

10
systems/vesuvio/default.nix
View file

@ -1,8 +1,13 @@
{
pkgs,
config,
_utils,
...
}: {
}: let
secrets = _utils.setupSharedSecrets config {secrets = ["frpToken"];};
in {
imports = [secrets.generate];
boot.tmp.cleanOnBoot = true;
zramSwap.enable = true;
@ -25,8 +30,7 @@
};
};
age.secrets.frpToken.file = ../../secrets/etna/frpToken.age;
systemd.services.frp.serviceConfig.EnvironmentFile = config.age.secrets.frpToken.path;
systemd.services.frp.serviceConfig.EnvironmentFile = secrets.get "frpToken";
networking = {
networkmanager.dns = "default";