maurice/snix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refactor(ops): Move clbot secret into agenix

Browse source 
Relates to b/161

Change-Id: I7badf22ff93bb4e8b06e4dd4a8bf880b0bd48f09
This commit is contained in:
Vincent Ambo 2021-12-10 09:58:16 +03:00
parent 496d899428
commit 78744c00f5
4 changed files with 25 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

10
ops/machines/whitby/default.nix
View file

@ -203,9 +203,13 @@ in {
};
# Configure secrets for services that need them.
age.secrets = {
gerrit-queue.file = depot.path.origSrc + "/ops/secrets/gerrit-queue.age";
};
age.secrets =
let
secretFile = name: "${depot.path.origSrc}/ops/secrets/${name}.age";
in {
clbot.file = secretFile "clbot";
gerrit-queue.file = secretFile "gerrit-queue";
};
# Automatically collect garbage from the Nix store.
services.depot.automatic-gc = {