mdebray/tvl-depot
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refactor(ops): Move panettone secrets to agenix

Browse source 
Relates to b/161

Change-Id: I508e5a0eacab668f4bd39a2c888d894b96bed093
This commit is contained in:
Vincent Ambo 2021-12-10 23:19:56 +03:00
parent 2b9be81ea0
commit 2f1c654c14
3 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
ops/machines/whitby/default.nix
View file

@ -211,8 +211,9 @@ in {
gerrit-queue.file = secretFile "gerrit-queue"; gerrit-queue.file = secretFile "gerrit-queue";
grafana.file = secretFile "grafana"; grafana.file = secretFile "grafana";
irccat.file = secretFile "irccat"; irccat.file = secretFile "irccat";
owothia.file = secretFile "owothia";
nix-cache-priv.file = secretFile "nix-cache-priv"; nix-cache-priv.file = secretFile "nix-cache-priv";
owothia.file = secretFile "owothia";
panettone.file = secretFile "panettone";
buildkite-agent-token = { buildkite-agent-token = {
file = secretFile "buildkite-agent-token"; file = secretFile "buildkite-agent-token";
@ -335,7 +336,6 @@ in {
enable = true; enable = true;
dbUser = "panettone"; dbUser = "panettone";
dbName = "panettone"; dbName = "panettone";
secretsFile = "/etc/secrets/panettone";
irccatChannel = "#tvl"; irccatChannel = "#tvl";
}; };

1
ops/modules/panettone.nix
View file

@ -36,6 +36,7 @@ in {
by systemd's EnvironmentFile by systemd's EnvironmentFile
''; '';
type = types.str; type = types.str;
default = "/run/agenix/panettone";
}; };
irccatHost = mkOption { irccatHost = mkOption {

1
ops/secrets/secrets.nix
View file

@ -23,4 +23,5 @@ in {
"nix-cache-priv.age" = default; "nix-cache-priv.age" = default;
"nix-cache-pub.age" = default; "nix-cache-pub.age" = default;
"owothia.age" = default; "owothia.age" = default;
"panettone.age" = default;
} }