clanCore.secrets: set default and add generate/deploy composite

This commit is contained in:
lassulus 2023-09-13 23:16:56 +02:00 committed by Mic92
parent 3b0701f275
commit 6153a9ee71

View File

@ -1,4 +1,4 @@
{ config, lib, ... }: { config, lib, pkgs, ... }:
{ {
options.clanCore.secretStore = lib.mkOption { options.clanCore.secretStore = lib.mkOption {
type = lib.types.enum [ "sops" "password-store" "custom" ]; type = lib.types.enum [ "sops" "password-store" "custom" ];
@ -8,6 +8,7 @@
''; '';
}; };
options.clanCore.secrets = lib.mkOption { options.clanCore.secrets = lib.mkOption {
default = { };
type = lib.types.attrsOf type = lib.types.attrsOf
(lib.types.submodule (secret: { (lib.types.submodule (secret: {
options = { options = {
@ -67,6 +68,10 @@
}; };
})); }));
}; };
config.system.build.generateDeploySecrets = pkgs.writeScript "generate_deploy_secrets" ''
${config.system.build.generateSecrets}
${config.system.build.deploySecrets}
'';
imports = [ imports = [
./sops.nix ./sops.nix
./password-store.nix ./password-store.nix