secrets: modularise

Browse source

Instead of reading from the 'secrets' directory all over the place,
consolidate all secrets-handling inside the same module.

This means that finally, the 'acme' service does not need to come read
right into this repository, however this leads to a potentially unsecure
setup (because I am storing passwords in the Nix store)... I have
decided not to care about this relatively minor issue, but I could
revisit it by using `sops-nix` in the future.

...

This commit is contained in:

Bruno BELANYI 2021-02-06 13:02:27 +01:00

parent 0871f3e6b4

commit d1d33fd1d1

4 changed files with 14 additions and 7 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

BIN

secrets/canary Normal file

View file

Binary file not shown.

BIN

secrets/default.nix Normal file

View file

Binary file not shown.