From a260eba3cf478c99dcfd92b821934b40ed905894 Mon Sep 17 00:00:00 2001
From: Vincent Ambo <tazjin@google.com>
Date: Mon, 23 Dec 2019 13:26:09 +0100
Subject: refactor(ops/kms_pass): Pin encrypted secrets into Nix store

---
 .envrc           | 1 -
 ops/kms_pass.nix | 1 +
 2 files changed, 1 insertion(+), 1 deletion(-)

diff --git a/.envrc b/.envrc
index c338a93bb8c2..34fe568ce944 100644
--- a/.envrc
+++ b/.envrc
@@ -4,4 +4,3 @@
 export PATH="${PWD}/bin:${PATH}"
 export NIX_PATH="nixpkgs=${PWD}/default.nix"
 export REPO_ROOT="${PWD}"
-export SECRETS_DIR="${PWD}/ops/secrets"
diff --git a/ops/kms_pass.nix b/ops/kms_pass.nix
index 14989b392dd1..b8a97d1332f8 100644
--- a/ops/kms_pass.nix
+++ b/ops/kms_pass.nix
@@ -14,6 +14,7 @@ in (writeShellScriptBin "pass" ''
 
   CMD="$1"
   readonly SECRET=$2
+  readonly SECRETS_DIR=${./secrets}
   readonly SECRET_PATH="$SECRETS_DIR/$SECRET"
 
   function secret_check {
-- 
cgit 1.4.1