christoph/flake-nixinator
1
Fork 0
Code Activity

Serives: Use sops for service secrets (heidi, kopia)

Browse Source
This commit is contained in:
Christoph Urlacher
2025-07-09 18:51:46 +02:00
parent d94e646c5e
commit 33d5e3b902
16 changed files with 47 additions and 87 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
system/services/0_TEMPLATE.nix
View File

@ -4,6 +4,11 @@
pkgs,
...
}: {
# If we need to pass secrets to containers we can't use plain env variables.
sops.templates."TEMPLATE_secrets.env".content = ''
SECRET=${config.sops.placeholder.SECRET}
'';
virtualisation.oci-containers.containers.TEMPLATE = {
image = "TEMPLATE";
autoStart = true;
@ -14,7 +19,7 @@
# DockerHub Credentials
username = "christoph.urlacher@protonmail.com";
passwordFile = "${config.age.secrets.dockerhub-pasword.path}";
passwordFile = "${config.sops.secrets.docker-password.path}";
};
dependsOn = [];
@ -31,9 +36,13 @@
# NVIDIA_DRIVER_CAPABILITIES = "all";
};
environmentFiles = [
config.sops.templates."TEMPLATE_secrets.env".path
];
extraOptions = [
# "--gpus=all"
"--net=behind-nginx"
# "--gpus=all"
];
};
}