1
0
mirror of https://github.com/kmein/niveum synced 2026-03-16 10:11:08 +01:00

chore: get secrets via input, mock for CI

this fixes CI, yay!
This commit is contained in:
2023-06-27 17:57:42 +02:00
parent d0edb9c915
commit 3138fd23ef
32 changed files with 203 additions and 111 deletions

View File

@@ -1,7 +1,6 @@
{
config,
inputs,
pkgs,
lib,
...
}: let
inherit (import ../../lib) retiolumAddresses;
@@ -26,20 +25,20 @@ in {
age.secrets = {
retiolum-rsa = {
file = ../../secrets/kabsa-retiolum-privateKey-rsa.age;
file = inputs.secrets + "/kabsa-retiolum-privateKey-rsa.age";
mode = "400";
owner = "tinc.retiolum";
group = "tinc.retiolum";
};
retiolum-ed25519 = {
file = ../../secrets/kabsa-retiolum-privateKey-ed25519.age;
file = inputs.secrets + "/kabsa-retiolum-privateKey-ed25519.age";
mode = "400";
owner = "tinc.retiolum";
group = "tinc.retiolum";
};
restic.file = ../../secrets/restic.age;
syncthing-cert.file = ../../secrets/kabsa-syncthing-cert.age;
syncthing-key.file = ../../secrets/kabsa-syncthing-key.age;
restic.file = inputs.secrets + "/restic.age";
syncthing-cert.file = inputs.secrets + "/kabsa-syncthing-cert.age";
syncthing-key.file = inputs.secrets + "/kabsa-syncthing-key.age";
};
environment.systemPackages = [pkgs.minecraft pkgs.zeroad];