mirrors/sops-nix
1
0
Fork 0
mirror of https://github.com/Mic92/sops-nix.git synced 2024-12-15 17:50:51 +00:00
Code Activity
581 commits 14 branches 1 tag 2.8 MiB
Commit graph

57 commits

Author SHA1 Message Date
Maximilian Bosch
f10110ddef
modules/sops/templates: declare defaultText for sops.templates.<name>.group 
When using `documentation.nixos.includeAllModules = true;` this fails
for me with

    error: attribute 'users' missing

           at /nix/store/30jax2y4q3d1xyf8ha3cwilw3kdz4pn8-source/modules/sops/templates/default.nix:8:11:

                7|   secretsForUsers = lib.filterAttrs (_: v: v.neededForUsers) cfg.secrets;
                8|   users = config.users.users;
                 |           ^
                9| in {
    (use '--show-trace' to show detailed location information)

Not depending on `config` when building the manual fixes the issue.
 2023-04-25 21:45:42 +02:00
Janne Heß
679ad65214
templates: Add descriptions and use singleLineStr 2023-04-23 12:56:01 +02:00
bors[bot]
5698b06b07
Merge #316 
316: HM: make `secretsMountPoint` and `symlinkPath` configurable r=Mic92 a=Shawn8901



Co-authored-by: MidAutumnMoon <me@418.im>
 2023-04-18 12:41:35 +00:00
mlatus
4de4d820ba fix scope in sops.templates; add relevant test 2023-04-18 12:47:12 +08:00
MidAutumnMoon
37400a275d HM: make secretsMountPoint and symlinkPath configurable 2023-04-17 18:30:23 +02:00
Jörg Thalheim
800f2cd885
Update modules/sops/templates/default.nix 2023-03-21 18:19:08 +00:00
mlatus
d93c3bf08e inline option type and submodule 2023-03-21 21:23:20 +08:00
Ninlives
8c4ecdc301
Apply suggestions from code review 
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
 2023-03-21 21:20:42 +08:00
mlatus
efd85fbf51 code improvement; use more secure flow to create secret file 2023-03-15 13:56:51 +08:00
mlatus
c955d8fe91 typo 2023-03-14 00:09:48 +08:00
mlatus
c4c39450b1 add sops.templates 2023-03-13 23:56:19 +08:00
pogobanane
e4b99135e5
Home-maager: support init and dotenv 
Co-authored-by: Jörg Thalheim <Mic92@users.noreply.github.com>
 2023-02-03 10:30:30 +01:00
Matthew Toohey
c4ff0f37ef Save launchd logs 2023-02-02 12:07:00 +01:00
Matthew Toohey
c3d2a46e44 Disable systemd service outside of Linux 2023-02-02 12:07:00 +01:00
Pogobanane
466d039190 darwin/home-manager: %r dir 2023-02-02 12:07:00 +01:00
Anil Anar
5e580b4bdd Fix missing spaces in script 2023-02-02 11:38:03 +01:00
Janne Heß
7f38c98162 More review fixups 2023-02-02 11:38:03 +01:00
Janne Heß
8b4048123e Add a launchd service to the home-manager module 2023-02-02 11:38:03 +01:00
Janne Heß
acaf36a1bf Implement home-manager support 
Closes #62
Closes #163
 2023-02-02 11:38:03 +01:00
lucasew
eb09a61dc9 format type: add dotenv and ini 
Signed-off-by: lucasew <lucas59356@gmail.com>
 2023-01-17 10:55:52 -03:00
Naïm Camille Favier
de37ae4b4a
module: add defaultText to validationPackage 
Makes flake-info succeed
 2022-07-21 09:04:38 +02:00
dramforever
fc2b603a9b Add validationPackage option for cross-compilation 2022-07-12 09:39:40 +08:00
Jos van Bakel
5ae679b566
Add package option to module 2022-04-23 16:58:11 +02:00
Janne Heß
5e2f743edd
Re-add service restarts 
We also have service reloads now, so add them as well
 2022-03-14 17:30:56 +01:00
Naïm Favier
4e887466a1
Add defaultText to some options to make flake-info succeed 2022-02-26 16:20:19 +01:00
Jörg Thalheim
95b4393147
Revert "allow to disable sops" 
This reverts commit 43f44540b8.

This commit was not intended for master
 2022-02-07 14:34:38 +01:00
Jörg Thalheim
43f44540b8
allow to disable sops 2022-02-07 14:34:18 +01:00
Naïm Favier
d5d9e67dea
Allow paths in sops.environment 
Useful for things like `sops.environment.SOPS_GPG_EXEC = pkgs.writeShellScript ...`
 2022-01-23 13:39:26 +01:00
Jörg Thalheim
ea297c304d module: no conditionals when exposing manifests 2022-01-04 16:32:08 +01:00
Janne Heß
168346e17e
module: Expose manifests 
We are planning to use this in our CI pipeline
 2022-01-04 00:42:40 +01:00
Jörg Thalheim
3ef112ec72 ignore ssh keys deployed with sops 2021-12-29 15:11:48 +01:00
Janne Heß
bac2a891b7
Fix user passwords disappearing 
Also add a test case for this.
Closes #137
 2021-11-13 14:17:51 +01:00
Janne Heß
80eb349cc8
Support arbitrary environment variables 
Should hopefully fix #23
 2021-11-09 23:33:49 +01:00
Janne Heß
af29ac4d84
Prune old secrets generations 
Closes #128
 2021-11-09 23:17:55 +01:00
Janne Heß
bac08f6919
Allow setting user passwords 2021-11-07 13:53:16 +01:00
Janne Heß
9683d128bd
Add support for restarting/reloading units 2021-11-07 12:37:57 +01:00
Jörg Thalheim
e0e57da497 fix documentation and assertions for age.keyFile 2021-09-30 21:10:08 +02:00
Janne Heß
4cebc08062
Fix age key generation and test it 2021-09-30 15:28:39 +02:00
Janne Heß
5db02f2939
Import age keyfile and ssh keys at the same time 2021-09-30 15:07:30 +02:00
Janne Heß
4568162629
Import age ssh keys by default 2021-09-24 12:09:53 +02:00
Janne Heß
44d91e885e
Add review suggestions 2021-09-24 12:09:53 +02:00
Janne Heß
db8fcb50a3
Add support for ssh-generated age keys 2021-09-24 12:09:52 +02:00
Janne Heß
b21c0ce3a8
Group gnupg and age in the module 2021-09-24 12:09:52 +02:00
Janne Heß
f5a2ba217b
Add age support 2021-09-24 12:09:52 +02:00
Jörg Thalheim
f3deaae52f
Merge branch 'master' into master-specialfs 2021-08-26 19:53:56 +01:00
Jörg Thalheim
ce5e734b26 sops-nix: fix build 2021-08-26 20:01:22 +02:00
0x4A6F
f89c1a5bf1
modules/sops: activation after specialfs 
* ensure mounted /run before running setup-secrets
 2021-08-22 23:28:48 +02:00
Maximilian Bosch
df2d4bbbfc
modules/sops: fix manual 
* Since 0d957142b6 the manual doesn't
  build since `<name>` is interpreted by docbook as (unmatched) XML-tag.
  I decided to use `<xref linkend` as this provides proper linking to
  the referenced option.

* Also, if the module is included on a machine where `sops` isn't used,
  but `documentation.nixos.includeAllModules = true;` is set, the module
  wouldn't evaluate because `config.sopsFile` is referenced in a
  `default`-tag. This is generally an issue since every change to this
  option would trigger a rebuild of the manual anyways.

  See also 94fd200305 for that.
 2021-07-10 16:11:31 +02:00
Nick Cao
0d957142b6
add readonly option sopsFileHash 2021-07-04 14:01:37 +08:00
Maximilian Bosch
94fd200305
module: Don't set option-value as option-default 
When using `documentation.nixos.includeAllModules = true;`, I'd
otherwise have to rebuild the manual on each change since I have my
`defaultSopsFile` in a git-repo with all my other configs.
 2021-03-28 22:58:13 +02:00