about summary refs log tree commit diff
path: root/ops
diff options
context:
space:
mode:
authorVincent Ambo <mail@tazj.in>2021-12-10T07·24+0300
committerVincent Ambo <mail@tazj.in>2021-12-10T07·32+0300
commita123b9e0a2a575816bab5b717a1d62b1966ac0a2 (patch)
tree0f46af019cd0a24a2d207ab32858860ba9e39312 /ops
parent78744c00f5df97d45b2c1b865cf8756edec0c5a3 (diff)
refactor(ops): Move owothia secret into agenix r/3175
Relates to b/161

Change-Id: I25445281b0dd3c3f3660f8bb0d8337506a1e427b
Diffstat (limited to 'ops')
-rw-r--r--ops/machines/whitby/default.nix1
-rw-r--r--ops/modules/owothia.nix2
-rw-r--r--ops/secrets/owothia.agebin0 -> 427 bytes
-rw-r--r--ops/secrets/secrets.nix3
4 files changed, 4 insertions, 2 deletions
diff --git a/ops/machines/whitby/default.nix b/ops/machines/whitby/default.nix
index 1f146c923ebb..d6d3004ffc34 100644
--- a/ops/machines/whitby/default.nix
+++ b/ops/machines/whitby/default.nix
@@ -209,6 +209,7 @@ in {
     in {
       clbot.file = secretFile "clbot";
       gerrit-queue.file = secretFile "gerrit-queue";
+      owothia.file = secretFile "owothia";
     };
 
   # Automatically collect garbage from the Nix store.
diff --git a/ops/modules/owothia.nix b/ops/modules/owothia.nix
index 909481873704..b2a77cddc2dd 100644
--- a/ops/modules/owothia.nix
+++ b/ops/modules/owothia.nix
@@ -11,7 +11,7 @@ in {
     secretsFile = lib.mkOption {
       type = lib.types.str;
       description = "File path from which systemd should read secrets";
-      default = "/etc/secrets/owothia";
+      default = "/run/agenix/owothia";
     };
 
     owoChance = lib.mkOption {
diff --git a/ops/secrets/owothia.age b/ops/secrets/owothia.age
new file mode 100644
index 000000000000..57a00504c8f3
--- /dev/null
+++ b/ops/secrets/owothia.age
Binary files differdiff --git a/ops/secrets/secrets.nix b/ops/secrets/secrets.nix
index ef359cd1cd1b..308893358dc9 100644
--- a/ops/secrets/secrets.nix
+++ b/ops/secrets/secrets.nix
@@ -9,6 +9,7 @@ let
   default.publicKeys = tazjin ++ [ whitby ];
 in {
   "besadii.age" = default;
-  "gerrit-queue.age" = default;
   "clbot.age" = default;
+  "gerrit-queue.age" = default;
+  "owothia.age" = default;
 }