christoph/flake-nixinator
1
Fork 0
Code Activity

Serives: Use sops for service secrets (heidi, kopia)

Browse Source
This commit is contained in:
Christoph Urlacher
2025-07-09 18:51:46 +02:00
parent 1547ca68f6
commit f3d80aeb15
16 changed files with 47 additions and 87 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
system/services/0_TEMPLATE.nix
View File

@ -14,7 +14,7 @@
# DockerHub Credentials
username = "christoph.urlacher@protonmail.com";
passwordFile = "${config.age.secrets.dockerhub-pasword.path}";
passwordFile = "${config.sops.secrets.docker-pasword.path}";
};
dependsOn = [];
@ -31,9 +31,18 @@
# NVIDIA_DRIVER_CAPABILITIES = "all";
};
# If we need to pass secrets to containers we can't use plain env variables.
sops.templates."TEMPLATE_secrets.env".content = ''
SECRET=${config.sops.placeholder.SECRET}
'';
environmentFiles = [
config.sops.templates."TEMPLATE_secrets.env".path
];
extraOptions = [
# "--gpus=all"
"--net=behind-nginx"
# "--gpus=all"
];
};
}