refactor(ops): Move clbot secret into agenix
Relates to b/161 Change-Id: I7badf22ff93bb4e8b06e4dd4a8bf880b0bd48f09
This commit is contained in:
parent
496d899428
commit
78744c00f5
4 changed files with 25 additions and 4 deletions
|
|
@ -37,7 +37,7 @@ let
|
|||
|
||||
serviceConfig = {
|
||||
User = "clbot";
|
||||
EnvironmentFile = "/etc/secrets/clbot";
|
||||
EnvironmentFile = cfg.secretsFile;
|
||||
Restart = "always";
|
||||
};
|
||||
};
|
||||
|
|
@ -55,6 +55,12 @@ in {
|
|||
type = with types; listOf str;
|
||||
description = "Channels in which to post (generates one unit per channel)";
|
||||
};
|
||||
|
||||
secretsFile = mkOption {
|
||||
type = types.str;
|
||||
description = "EnvironmentFile from which to load secrets";
|
||||
default = "/run/agenix/clbot";
|
||||
};
|
||||
};
|
||||
|
||||
config = mkIf cfg.enable {
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue