nix-infra/config/hosts/torrent/secrets.nix

14 lines
315 B
Nix
Raw Normal View History

{ keyCommandEnv, ... }:
{
deployment.keys = {
"torrent-samba-credentials.secret" = {
keyCommand = keyCommandEnv ++ [ "pass" "torrent/samba-credentials" ];
destDir = "/secrets";
user = "root";
group = "root";
permissions = "0640";
uploadAt = "pre-activation";
};
};
}