feat(ops/secrets): Configure secrets for gerrit-queue
Adds a systemd EnvironmentFile secret that contains the Gerrit username & password for gerrit-queue. Change-Id: I25acf87764c26774045138402b8a417b6813ee8f
This commit is contained in:
parent
4870b1a2ff
commit
496d899428
3 changed files with 16 additions and 0 deletions
|
@ -40,6 +40,7 @@ in {
|
||||||
"${depot.path}/ops/modules/www/tvl.fyi.nix"
|
"${depot.path}/ops/modules/www/tvl.fyi.nix"
|
||||||
"${depot.path}/ops/modules/www/tvl.su.nix"
|
"${depot.path}/ops/modules/www/tvl.su.nix"
|
||||||
"${depot.path}/ops/modules/www/wigglydonke.rs.nix"
|
"${depot.path}/ops/modules/www/wigglydonke.rs.nix"
|
||||||
|
"${depot.third_party.agenix.src}/modules/age.nix"
|
||||||
"${pkgs.path}/nixos/modules/services/web-apps/gerrit.nix"
|
"${pkgs.path}/nixos/modules/services/web-apps/gerrit.nix"
|
||||||
];
|
];
|
||||||
|
|
||||||
|
@ -201,6 +202,11 @@ in {
|
||||||
challengeResponseAuthentication = false;
|
challengeResponseAuthentication = false;
|
||||||
};
|
};
|
||||||
|
|
||||||
|
# Configure secrets for services that need them.
|
||||||
|
age.secrets = {
|
||||||
|
gerrit-queue.file = depot.path.origSrc + "/ops/secrets/gerrit-queue.age";
|
||||||
|
};
|
||||||
|
|
||||||
# Automatically collect garbage from the Nix store.
|
# Automatically collect garbage from the Nix store.
|
||||||
services.depot.automatic-gc = {
|
services.depot.automatic-gc = {
|
||||||
enable = true;
|
enable = true;
|
||||||
|
|
9
ops/secrets/gerrit-queue.age
Normal file
9
ops/secrets/gerrit-queue.age
Normal file
|
@ -0,0 +1,9 @@
|
||||||
|
age-encryption.org/v1
|
||||||
|
-> ssh-ed25519 dcsaLw XuDxJkTX3Tq8PRoHq29hYz/Qcz2uvud00BW5F8QvA0w
|
||||||
|
zxl5HgqvDoB5WwB5NDCcuq0/hD2hDP0vIEJ6rs8hM9Y
|
||||||
|
-> ssh-ed25519 OkGqLg K5Hsabm/iPD9tgNre6p6kbMnlnxmXi1ogG2+BdWX/BQ
|
||||||
|
QCmy7rhSmkdmj50twwlqrtp7t0nfhRPVlC7Z79P64hY
|
||||||
|
-> b-grease ouC0Z%'v Sx lOZ]`8 H
|
||||||
|
XQjxJlepFUehbRQ
|
||||||
|
--- NAKvcgfnmSJDWoG37cUVJ/uOcsYsie4QDeqKsVrSEME
|
||||||
|
aqű÷ĺ8ĐăPŇÔ·ˇÍóń¨ç4*ĄÝě×0?»ÔA
‰ŮK‚‰I|x ^:Ů^`ă[<5B>e&}üżÓ±y6oČAőî4‹W¦yř/PŤŰŹŽŁ=;ýÓŘd
‘ö´N>´ĂUšó4[~uÎ<75>A>k}ý<>/8iśĘ×FUąÝ˘)˝oQĹâfÍbâ§!„ý·)čöjĘ~żžĺ–®5 ŕ[yäĚ`‡iÔJą«
|
|
@ -9,4 +9,5 @@ let
|
||||||
default.publicKeys = tazjin ++ [ whitby ];
|
default.publicKeys = tazjin ++ [ whitby ];
|
||||||
in {
|
in {
|
||||||
"besadii.age" = default;
|
"besadii.age" = default;
|
||||||
|
"gerrit-queue.age" = default;
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in a new issue