jsw/NiksOS
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Upgraded secrets

Browse source
This commit is contained in:
Jurn Wubben 2025-06-12 00:45:10 +02:00
parent 5cea32b66f
commit e3affcd571
1 changed files with 5 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

8
secrets/default.nix
View file

@ -1,4 +1,6 @@
{config, ...}: {
{config, ...}: let
serviceUser = x: config.systemd.services.${x}.serviceConfig.User;
in {
age.secrets = {
transferSh = {
file = ./transfer-sh.age;
@ -8,7 +10,7 @@
file = ./dcbot.age;
owner =
if config.niksos.server
then "dcbot" # "dcbot" doesn't exist on e.g laptop.
then serviceUser "dcbot" # "dcbot" doesn't exist on e.g laptop.
else "root";
};
password.file = ./password.age;
@ -23,7 +25,7 @@
mail-admin = {
owner =
if config.niksos.server
then "stalwart-mail"
then serviceUser "stalwart-mail"
else "root";
file = ./mail-admin.age;
};