about summary refs log tree commit diff
path: root/ops/machines/all-systems.nix
diff options
context:
space:
mode:
authorVincent Ambo <mail@tazj.in>2021-12-12T08·14+0300
committerVincent Ambo <mail@tazj.in>2021-12-12T08·19+0300
commit3a410a78df98fbace3fb3d6c6a570058a2758811 (patch)
tree0c12cf7c834a5061fd0e0319d3c0a4b75bb5f915 /ops/machines/all-systems.nix
parent8cbb42006a23b1b5295fb48a5115cc35b8f2224a (diff)
feat(ops/secrets): Make (encrypted) secrets part of the tree r/3209
Currently in NixOS configuration using agenix secrets there is no
build time validation of secret paths - things fail at runtime (system
activation).

To prevent that, this CL makes the secrets part of the tree based on
the same configuration file used by agenix itself.

This guards against:

* agenix secrets.nix definition for a non-existent file
* age.secrets value in a NixOS config for a non-existent secret

Change-Id: I5b191dcbd5b2522566ff7c38f8a988bbf7679364
Diffstat (limited to 'ops/machines/all-systems.nix')
0 files changed, 0 insertions, 0 deletions