sercanto/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

secrets: read all files from dir

Browse source 
this enforces 1:1 mapping between the filename and the attribute name
This commit is contained in:
zimbatm 2020-01-12 13:53:27 +01:00
parent 51257488aa
commit 3e2ae4a579
No known key found for this signature in database
GPG key ID: 71BAF6D40C1D63D7
3 changed files with 3 additions and 3 deletions

2
build01/buildkite.nix
View file

@ -5,7 +5,7 @@
enable = true; enable = true;
tokenPath = "/run/keys/buildkite-token"; tokenPath = "/run/keys/buildkite-token";
openssh.privateKeyPath = builtins.toPath "/run/keys/buildkite-agent-key"; openssh.privateKeyPath = builtins.toPath "/run/keys/buildkite-agent-key";
openssh.publicKeyPath = builtins.toPath "/run/keys/buildkite-agent-key-pub"; openssh.publicKeyPath = builtins.toPath "/run/keys/buildkite-agent-key.pub";
runtimePackages = [ runtimePackages = [
pkgs.gnutar pkgs.gnutar

4
deployment.nix
View file

@ -27,8 +27,8 @@ in {
permissions = "0600"; permissions = "0600";
}; };
deployment.keys.buildkite-agent-key-pub = { deployment.keys."buildkite-agent-key.pub" = {
text = secrets.buildkite-agent-key-pub; text = secrets."buildkite-agent-key.pub";
user = "buildkite-agent"; user = "buildkite-agent";
permissions = "0600"; permissions = "0600";
}; };

BIN
secrets/default.nix
View file

Binary file not shown.