mdebray/tvl-depot
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refactor(ops): Move grafana secret into agenix

Browse source 
Change-Id: Id141758135c796881e91d20b950dae74c40d9ab3
This commit is contained in:
Vincent Ambo 2021-12-10 15:55:08 +03:00 committed by clbot
parent 1b94d2c0ba
commit b1108821a9
3 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
ops/machines/whitby/default.nix
View file

@ -209,6 +209,7 @@ in {
in {
clbot.file = secretFile "clbot";
gerrit-queue.file = secretFile "gerrit-queue";
grafana.file = secretFile "grafana";
irccat.file = secretFile "irccat";
owothia.file = secretFile "owothia";
@ -517,7 +518,7 @@ in {
};
};
# Contains GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET.
systemd.services.grafana.serviceConfig.EnvironmentFile = "/etc/secrets/grafana";
systemd.services.grafana.serviceConfig.EnvironmentFile = "/run/agenix/grafana";
security.sudo.extraRules = [
{

BIN
ops/secrets/grafana.age Normal file
View file

Binary file not shown.

1
ops/secrets/secrets.nix
View file

@ -17,6 +17,7 @@ in {
"clbot-ssh.age" = default;
"clbot.age" = default;
"gerrit-queue.age" = default;
"grafana.age" = default;
"irccat.age" = default;
"owothia.age" = default;
}