ambroisie/nix-config
ambroisie/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

home: secrets: clean-up 'default.nix'
All checks were successful
continuous-integration/drone/push Build is passing
Details

Browse source
This commit is contained in:
Bruno BELANYI 2021-06-12 20:35:28 +02:00
parent f8325cc9c7
commit 3a471433ed
1 changed files with 10 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
home/secrets/default.nix
View file

@ -2,13 +2,17 @@
with lib; with lib;
let let
canaryHash = builtins.hashFile "sha256" ./canary; throwOnCanary =
expectedHash = let
"9df8c065663197b5a1095122d48e140d3677d860343256abd5ab6e4fb4c696ab"; canaryHash = builtins.hashFile "sha256" ./canary;
expectedHash =
"9df8c065663197b5a1095122d48e140d3677d860343256abd5ab6e4fb4c696ab";
in
if canaryHash != expectedHash
then throw "Secrets are not readable. Have you run `git-crypt unlock`?"
else id;
in in
if canaryHash != expectedHash then throwOnCanary {
abort "Secrets are not readable. Have you run `git-crypt unlock`?"
else {
options.my.secrets = mkOption { options.my.secrets = mkOption {
type = types.attrs; type = types.attrs;
}; };