1
0
Fork 0
mirror of https://github.com/Mic92/sops-nix.git synced 2024-12-14 11:57:52 +00:00
Commit graph

904 commits

Author SHA1 Message Date
Jörg Thalheim
d984024f45
try to fix certificates 2020-08-07 11:38:52 +01:00
Jörg Thalheim
0b53376ef6
add flake.lock
packages needs this
2020-08-07 11:38:02 +01:00
Jörg Thalheim
9cbdd53970
drone-ci: access host-nix daemon 2020-08-02 00:09:23 +01:00
Jörg Thalheim
0cec798bc3
switch to drone-io 2020-08-02 00:06:02 +01:00
Jörg Thalheim
32c42617e4
sshkeys: use %w in fmt.Errorf calls 2020-07-30 16:22:43 +01:00
Jörg Thalheim
df86cc4e71
ssh-to-pgp: use %w for fmt.Errorf calls 2020-07-30 16:21:47 +01:00
Jörg Thalheim
01e4038c9a
don't print full executable path logging key import 2020-07-30 16:19:51 +01:00
Jörg Thalheim
9cd8bb080f
sops-install-secrets: use %w for fmt.Errorf calls 2020-07-30 16:19:14 +01:00
Jörg Thalheim
7eb1ca2322
add .drone.yml 2020-07-29 09:51:27 +01:00
Jörg Thalheim
bef5a49352
document how to expose same secret to different users 2020-07-29 08:11:44 +01:00
Jörg Thalheim
4728721e32
Merge pull request #25 from Mic92/test-foo 2020-07-25 18:29:44 +01:00
Jörg Thalheim
a693847646
buildkite: remove pipeline
This would allow to extract secrets
2020-07-25 18:26:45 +01:00
Jörg Thalheim
42463f12e0
Readme.md: add TODO for systemd services 2020-07-25 18:06:03 +01:00
Jörg Thalheim
7cca040407
README.md: fix typo 2020-07-23 16:40:45 +01:00
Jörg Thalheim
ce579c3b17
Merge pull request #22 from mweinelt/readme
README: correct mistake in GPG key decryption explanation
2020-07-23 15:52:16 +01:00
Martin Weinelt
6391feffe4
README: correct mistake in GPG key decryption explanation 2020-07-23 16:44:43 +02:00
Jörg Thalheim
aea30fe0e2
add flake installation 2020-07-23 09:08:42 +01:00
Jörg Thalheim
04584b67b0
README: fix codeblock language 2020-07-23 08:53:05 +01:00
Jörg Thalheim
70cd2a9dfe
README: fixup configuration markup 2020-07-23 08:51:53 +01:00
Jörg Thalheim
0acfed8167
Merge pull request #21 from Mic92/docs-improvements 2020-07-23 08:49:35 +01:00
Jörg Thalheim
59e6df1acf
sops-init-gpg-key: include hostname on darwin 2020-07-23 08:45:32 +01:00
Jörg Thalheim
ffc9c2c78c
module: add defaultSopsFormat option 2020-07-23 08:36:38 +01:00
Jörg Thalheim
2fa9c1a948
README: document different file formats & symlinks 2020-07-23 08:34:18 +01:00
Jörg Thalheim
98afd85ef8
sops-ini-gpg-key: add install check 2020-07-23 08:20:08 +01:00
Jörg Thalheim
c8eaa32f00
README.md: make niv path less weird 2020-07-23 07:11:43 +01:00
Jörg Thalheim
04a2eaf220
README: describe installation methods
fixes #20
2020-07-23 07:10:24 +01:00
Jörg Thalheim
298b235f66
Merge pull request #19 from Mic92/macos-ci 2020-07-22 23:52:36 +01:00
Jörg Thalheim
b8d91d61ac
restrict sops-install-secrets to linux
ramfs is not available elswhere.
2020-07-22 23:46:05 +01:00
Jörg Thalheim
71db50d5eb add a release.nix 2020-07-22 23:34:56 +01:00
Jörg Thalheim
4a41039ab3
mark sops-install-secrets as Linux only 2020-07-22 23:12:13 +01:00
Jörg Thalheim
5e95616f0f
use a shorter tempdir on macOS
By default macOS does something like this:

/var/folders/08/j4g_jn953lngpvgmyg8dygk00000gn/T/

breaking unix socket paths of gnupg.
2020-07-22 23:10:22 +01:00
Andreas Fuchs
1279274ddc
Use /tmp as the temporary dir for ssh-to-gpg
This isn't great: but it might prevent the agent from complaining.
2020-07-22 23:10:22 +01:00
Andreas Fuchs
0d885b439f
Create a temporary GNUPGHOME dir
This should prevent the paths from getting unwieldy, we'll see.
2020-07-22 23:10:22 +01:00
Jörg Thalheim
8c33651e0c
ci: add macOS support 2020-07-22 23:10:22 +01:00
Jörg Thalheim
3095053dd4 darwin fixes 2020-07-22 22:29:01 +01:00
Jörg Thalheim
ca550a4c65
Merge pull request #18 from Mic92/fix-subkeys 2020-07-22 22:12:25 +01:00
Jörg Thalheim
66393a1c82
sops-pgp-hook: ignore subkeys
fixes #17
2020-07-22 15:07:51 +01:00
Jörg Thalheim
e39f83d86e
Merge pull request #16 from Mic92/fix-test
sops-pgp-hook: make test robust against file order
2020-07-22 14:36:48 +01:00
Jörg Thalheim
0729c15de3
sops-pgp-hook: make test robust against file order
There is no guarantee that keys will be returned in a certain order
2020-07-22 14:32:08 +01:00
Jörg Thalheim
b7ce70d49e
README: make adding users to keys group consistent 2020-07-21 14:55:18 +01:00
Jörg Thalheim
99ed276eb4
README: document access control 2020-07-21 12:30:53 +01:00
Jörg Thalheim
2fb90c84a6
Merge pull request #13 from Mic92/fix-existing-files 2020-07-20 00:16:31 +01:00
Jörg Thalheim
0f17dbc4bb
tests: add golangci-lint 2020-07-20 00:13:26 +01:00
Jörg Thalheim
f0b4003560
Merge pull request #12 from Mic92/fix-existing-files 2020-07-19 23:31:00 +01:00
Jörg Thalheim
fd28d45f10
make golangci-lint happy 2020-07-19 23:30:28 +01:00
Jörg Thalheim
16c3c3e39c
README.md: add more placeholder 2020-07-19 23:24:44 +01:00
Jörg Thalheim
bffb0afb48
fix replace existing files 2020-07-19 23:23:38 +01:00
Jörg Thalheim
04b33fdb9e
Merge pull request #11 from Mic92/validate 2020-07-19 21:20:52 +01:00
Jörg Thalheim
59803f7530
fix user manifest validation in sandbox
we should not lookup users there
2020-07-19 21:04:58 +01:00
Jörg Thalheim
30ea9d3738
README.md: spell fixes 2020-07-19 19:31:45 +01:00