12 lines
323 B
Nix
12 lines
323 B
Nix
|
{ ... }:
|
||
|
|
{
|
||
|
|
deployment.keys."signing-key.secret" = {
|
||
|
|
keyCommand = [ "env" "GNUPGHOME=/home/yuri/.passinfra_gnupg" "PASSWORD_STORE_DIR=/home/yuri/pass/infra" "pass" "hydra/signing-key" ];
|
||
|
|
destDir = "/secrets";
|
||
|
|
user = "root";
|
||
|
|
group = "root";
|
||
|
|
permissions = "0640";
|
||
|
|
uploadAt = "pre-activation";
|
||
|
|
};
|
||
|
|
}
|