diff options
| author | Vincent Ambo <mail@tazj.in> | 2023-06-18T12·25+0300 |
|---|---|---|
| committer | tazjin <tazjin@tvl.su> | 2023-06-18T12·43+0000 |
| commit | 507cd852646b7b6427fd56dd4657154e2661e93c (patch) | |
| tree | 7fc6b4654aa5924cbf0f3c795dfde1d5364b1c18 /users/tazjin/nixos/modules/tgsa.nix | |
| parent | 332a821100be288863ad0bac5f655ed512e4fd19 (diff) | |
feat(tazjin/koptevo): deploy tgsa r/6328
The main instance is still running on polyanka, but things are moving in this direction. Change-Id: Idfa9e508023c05148003ac4621ae01dceb284c66 Reviewed-on: https://cl.tvl.fyi/c/depot/+/8827 Reviewed-by: tazjin <tazjin@tvl.su> Tested-by: BuildkiteCI
Diffstat (limited to 'users/tazjin/nixos/modules/tgsa.nix')
| -rw-r--r-- | users/tazjin/nixos/modules/tgsa.nix | 8 |
1 files changed, 6 insertions, 2 deletions
diff --git a/users/tazjin/nixos/modules/tgsa.nix b/users/tazjin/nixos/modules/tgsa.nix index 9953ab03acae..e162e0d8228f 100644 --- a/users/tazjin/nixos/modules/tgsa.nix +++ b/users/tazjin/nixos/modules/tgsa.nix @@ -6,11 +6,15 @@ wantedBy = [ "multi-user.target" ]; serviceConfig = { - EnvironmentFile = "/root/tgsa-env"; # TODO(tazjin): automate this DynamicUser = true; Restart = "always"; - ExecStart = "${depot.users.tazjin.tgsa}/bin/tgsa"; + LoadCredential = "tgsa-yandex.json:/run/agenix/tgsa-yandex"; }; + + script = '' + export YANDEX_KEY_FILE="''${CREDENTIALS_DIRECTORY}/tgsa-yandex.json" + ${depot.users.tazjin.tgsa}/bin/tgsa + ''; }; services.nginx.virtualHosts."tgsa" = { |