···

       
71
       
 
       
        '';

     

       
72
       
 
       
      };

     

       
73
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
74
       
 
       


     

       
75
       
 
       
      settings = mkOption {

     

       
76
       
 
       
        type = format.type;

     
···

       
148
       
 
       
                };

     

       
149
       
 
       
            in

     

       
150
       
 
       
            "${cfg.package}/bin/nomad agent -config=/etc/nomad.json -plugin-dir=${pluginsDir}/bin" +

     

       
151
       
-
       
            concatMapStrings (path: " -config=${path}") cfg.extraSettingsPaths;

     

       
0
       
 
       

     

       
152
       
 
       
          KillMode = "process";

     

       
153
       
 
       
          KillSignal = "SIGINT";

     

       
154
       
 
       
          LimitNOFILE = 65536;

     
···

       
157
       
 
       
          Restart = "on-failure";

     

       
158
       
 
       
          RestartSec = 2;

     

       
159
       
 
       
          TasksMax = "infinity";

     

       
0
       
 
       

     

       
160
       
 
       
        }

     

       
161
       
 
       
        (mkIf cfg.enableDocker {

     

       
162
       
 
       
          SupplementaryGroups = "docker"; # space-separated string

     

···

       
71
       
 
       
        '';

     

       
72
       
 
       
      };

     

       
73
       
 
       


     

       
74
       
+
       
      credentials = mkOption {

     

       
75
       
+
       
        description = lib.mdDoc ''

     

       
76
       
+
       
          Credentials envs used to configure nomad secrets.

     

       
77
       
+
       
        '';

     

       
78
       
+
       
        type = types.attrsOf types.str;

     

       
79
       
+
       
        default = { };

     

       
80
       
+
       


     

       
81
       
+
       
        example = {

     

       
82
       
+
       
          logs_remote_write_password = "/run/keys/nomad_write_password";

     

       
83
       
+
       
        };

     

       
84
       
+
       
      };

     

       
85
       
 
       


     

       
86
       
 
       
      settings = mkOption {

     

       
87
       
 
       
        type = format.type;

     
···

       
159
       
 
       
                };

     

       
160
       
 
       
            in

     

       
161
       
 
       
            "${cfg.package}/bin/nomad agent -config=/etc/nomad.json -plugin-dir=${pluginsDir}/bin" +

     

       
162
       
+
       
            concatMapStrings (path: " -config=${path}") cfg.extraSettingsPaths +

     

       
163
       
+
       
            concatMapStrings (key: " -config=\${CREDENTIALS_DIRECTORY}/${key}") (lib.attrNames cfg.credentials);

     

       
164
       
 
       
          KillMode = "process";

     

       
165
       
 
       
          KillSignal = "SIGINT";

     

       
166
       
 
       
          LimitNOFILE = 65536;

     
···

       
169
       
 
       
          Restart = "on-failure";

     

       
170
       
 
       
          RestartSec = 2;

     

       
171
       
 
       
          TasksMax = "infinity";

     

       
172
       
+
       
          LoadCredential = lib.mapAttrsToList (key: value: "${key}:${value}") cfg.credentials;

     

       
173
       
 
       
        }

     

       
174
       
 
       
        (mkIf cfg.enableDocker {

     

       
175
       
 
       
          SupplementaryGroups = "docker"; # space-separated string