forked from fi/nix-infra
Work on hydra config, fix tor relay config, prepare web-public-2 host
This commit is contained in:
parent
64d9dbd4b0
commit
c6f4780ccd
15 changed files with 176 additions and 9 deletions
11
hosts/hydra/secrets.nix
Normal file
11
hosts/hydra/secrets.nix
Normal file
|
|
@ -0,0 +1,11 @@
|
|||
{ ... }:
|
||||
{
|
||||
deployment.keys."signing-key.secret" = {
|
||||
keyCommand = [ "env" "GNUPGHOME=/home/yuri/.passinfra_gnupg" "PASSWORD_STORE_DIR=/home/yuri/pass/infra" "pass" "hydra/signing-key" ];
|
||||
destDir = "/secrets";
|
||||
user = "root";
|
||||
group = "root";
|
||||
permissions = "0640";
|
||||
uploadAt = "pre-activation";
|
||||
};
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue