35 commits

Author	SHA1	Message	Date
Jos van Bakel	5ae679b566	Add package option to module	2022-04-23 16:58:11 +02:00
Janne Heß	5e2f743edd	Re-add service restarts ... We also have service reloads now, so add them as well	2022-03-14 17:30:56 +01:00
Naïm Favier	4e887466a1	Add defaultText to some options to make flake-info succeed	2022-02-26 16:20:19 +01:00
Jörg Thalheim	95b4393147	Revert "allow to disable sops" ... This reverts commit 43f44540b8. This commit was not intended for master	2022-02-07 14:34:38 +01:00
Jörg Thalheim	43f44540b8	allow to disable sops	2022-02-07 14:34:18 +01:00
Naïm Favier	d5d9e67dea	Allow paths in sops.environment ... Useful for things like `sops.environment.SOPS_GPG_EXEC = pkgs.writeShellScript ...`	2022-01-23 13:39:26 +01:00
Jörg Thalheim	ea297c304d	module: no conditionals when exposing manifests	2022-01-04 16:32:08 +01:00
Janne Heß	168346e17e	module: Expose manifests ... We are planning to use this in our CI pipeline	2022-01-04 00:42:40 +01:00
Jörg Thalheim	3ef112ec72	ignore ssh keys deployed with sops	2021-12-29 15:11:48 +01:00
Janne Heß	bac2a891b7	Fix user passwords disappearing ... Also add a test case for this. Closes #137	2021-11-13 14:17:51 +01:00
Janne Heß	80eb349cc8	Support arbitrary environment variables ... Should hopefully fix #23	2021-11-09 23:33:49 +01:00
Janne Heß	af29ac4d84	Prune old secrets generations ... Closes #128	2021-11-09 23:17:55 +01:00
Janne Heß	bac08f6919	Allow setting user passwords	2021-11-07 13:53:16 +01:00
Janne Heß	9683d128bd	Add support for restarting/reloading units	2021-11-07 12:37:57 +01:00
Jörg Thalheim	e0e57da497	fix documentation and assertions for age.keyFile	2021-09-30 21:10:08 +02:00
Janne Heß	4cebc08062	Fix age key generation and test it	2021-09-30 15:28:39 +02:00
Janne Heß	5db02f2939	Import age keyfile and ssh keys at the same time	2021-09-30 15:07:30 +02:00
Janne Heß	4568162629	Import age ssh keys by default	2021-09-24 12:09:53 +02:00
Janne Heß	44d91e885e	Add review suggestions	2021-09-24 12:09:53 +02:00
Janne Heß	db8fcb50a3	Add support for ssh-generated age keys	2021-09-24 12:09:52 +02:00
Janne Heß	b21c0ce3a8	Group gnupg and age in the module	2021-09-24 12:09:52 +02:00
Janne Heß	f5a2ba217b	Add age support	2021-09-24 12:09:52 +02:00
Jörg Thalheim	f3deaae52f	Merge branch 'master' into master-specialfs	2021-08-26 19:53:56 +01:00
Jörg Thalheim	ce5e734b26	sops-nix: fix build	2021-08-26 20:01:22 +02:00
0x4A6F	f89c1a5bf1	modules/sops: activation after specialfs ... * ensure mounted /run before running setup-secrets	2021-08-22 23:28:48 +02:00
Maximilian Bosch	df2d4bbbfc	modules/sops: fix manual ... * Since 0d957142b6 the manual doesn't build since `<name>` is interpreted by docbook as (unmatched) XML-tag. I decided to use `<xref linkend` as this provides proper linking to the referenced option. * Also, if the module is included on a machine where `sops` isn't used, but `documentation.nixos.includeAllModules = true;` is set, the module wouldn't evaluate because `config.sopsFile` is referenced in a `default`-tag. This is generally an issue since every change to this option would trigger a rebuild of the manual anyways. See also 94fd200305 for that.	2021-07-10 16:11:31 +02:00
Nick Cao	0d957142b6	add readonly option sopsFileHash	2021-07-04 14:01:37 +08:00
Maximilian Bosch	94fd200305	module: Don't set option-value as option-default ... When using `documentation.nixos.includeAllModules = true;`, I'd otherwise have to rebuild the manual on each change since I have my `defaultSopsFile` in a git-repo with all my other configs.	2021-03-28 22:58:13 +02:00
Naïm Favier	360bfd77ae	improve assertions	2021-03-06 12:34:48 +01:00
Jörg Thalheim	23fae8a8b1	fix cross compilation	2021-01-30 10:26:09 +01:00
Jörg Thalheim	ffc9c2c78c	module: add defaultSopsFormat option	2020-07-23 08:36:38 +01:00
Jörg Thalheim	b395301115	nixos: enable manifest validation	2020-07-19 19:21:28 +01:00
Jörg Thalheim	7bd84011ef	fix sops nixos module	2020-07-12 17:52:03 +01:00
Jörg Thalheim	b75e51c423	add tests + ssh key support	2020-07-12 13:50:55 +01:00
Jörg Thalheim	8ccd9ba269	first commit	2020-07-06 07:31:57 +01:00