commit 6d21a7e71d72e469bca143cb6db4fc97a49f1a9d · soopy.moe/gensokyo

+25
docs/utils.md
···

       17
       17
        
         websockets ? false

     

       18
       18
        
       }

     

       19
       19
        
       ```

     

       20
       20
       +
       

     

       21
       21
       +
       ## `_utils.genSecrets`

     

       22
       22
       +
       `namespace[str] -> files[list[str]] -> value[attrset] -> attrset`

     

       23
       23
       +
       a

     

       24
       24
       +
       generate an attrset to be passed into sops.secrets.

     

       25
       25
       +
       

     

       26
       26
       +
       ### Example

     

       27
       27
       +
       ```nix

     

       28
       28
       +
       { _utils, ... }:

     

       29
       29
       +
       let

     

       30
       30
       +
         secrets = [

     

       31
       31
       +
           "secure_secret"

     

       32
       32
       +
           # this is a directory structure, so secrets will be stored as a file in /run/secrets/service/test/secret.

     

       33
       33
       +
           "service/test/secret"

     

       34
       34
       +
         ];

     

       35
       35
       +
       in {

     

       36
       36
       +
         sops.secrets = _utils.genSecrets "" secrets {}; # it's recommended to use a namespace, but having none is still fine.

     

       37
       37
       +
         # -> sops.secrets."secure_secret" = {};

     

       38
       38
       +
         #    sops.secrets."service/test/secret" = {};

     

       39
       39
       +
         sops.secrets = _utils.genSecrets "balls" ["balls_secret"] {owner = "balls"};

     

       40
       40
       +
         # -> sops.secrets."balls/balls_secret" = {owner = "balls";};

     

       41
       41
       +
       }

     

       42
       42
       +
       ```

     

       43
       43
       +
       

     

       44
       44
       +
       See https://github.com/soopyc/nix-on-koumakan/blob/b7983776143c15c91df69ef34ba4264a22047ec6/systems/koumakan/services/fedivese/akkoma.nix#L8-L34 for a more extensive example