Sender | Message | Time |
---|---|---|
2 Dec 2021 | ||
In reply to @ultranix:matrix.orgWell if you are doing something like this, I'm pretty sure that secret will end up in the nix store at some point | 00:50:39 | |
In reply to @pachumicchu:myrdd.infothat doesnt matter. i use it to encrypt location.latitude or location.longitude etc, things that are of personal information for pseudonyms etc | 01:30:13 | |
but also, there's a lot of configuration ini's that still use string keys within config files | 01:30:46 | |
and i'm not sure that can change? | 01:31:14 | |
In reply to @ultranix:matrix.orgThats where I think envsubst is really useful and I've seen a lot of services integrate it | 01:31:45 | |
Then you can use agenix to encrypt the environment file with the secret information, and pass it along to the systemd service then you get access to that secret data in your ocnfig | 01:32:36 | |
ok good to know | 01:34:23 | |
* Then you can use agenix to encrypt the environment file with the secret information, and pass it along to the systemd service then you get access to that secret data in your config | 01:34:42 | |
the part about hiding parts of your config is a niche case, but can be useful. but in that case, i suppose you'd import a private repo flake or something | 01:35:05 | |
In reply to @blaggacao:matrix.orgI’d volunteer, will submit it later today | 08:24:21 | |
In reply to @teutat3s:pub.solarah too slow https://github.com/NixOS/nix/pull/5709 | 11:30:57 | |
I have a few warnings when doing
I do not use those (besides pkgs), is that a problem in digga then? | 11:47:23 | |
In reply to @ultranix:matrix.orgI haven't looked deeper, but this might interest you https://golangrepo.com/repo/slok-agebox in order to also use age for what you would use git-crypt for. | 12:22:23 | |
In reply to @ultranix:matrix.org* I haven't looked deeper, but this might interest you https://github.com/slok/agebox in order to also use age for what you would use git-crypt for. | 12:22:48 | |
The only warning that is avoidable is ca-references which is not a thing any more in newver versions of nix. | 12:37:22 | |
Wherever that is currently set, we should do ${lib.optional !(lib.versionAtLeast builtins.nixVersion "2.4") "ca-references"} | 12:39:29 | |
hello, im trying to update to 21.11 but when i change the pinned version of nixpkgs i get this error: `error: value is null while a set was expected
(use '--show-trace' to show detailed location information) ` | 12:52:45 | |
That's because digga needs an update, too | 12:57:23 | |
dang, so i can't update just yet? | 12:57:40 | |
You could try
| 12:58:12 | |
then make the change to the nixos input -> 21.11 release branch in your flake.nix like here https://github.com/divnix/devos/pull/403/files#diff-206b9ce276ab5971a2489d75eb1b12999d4bf3843b7988cbe8d687cfde61dea0 | 12:59:19 | |
and maybe after that just:
This will update the flake.lock for all inputs | 13:00:22 | |
oooh i'll try, thank you very much :) | 13:00:33 | |
the last cmd is sufficient actually and makes the first one I mentioned redundant (it'll update the digga input as well), but I find it a handy cmd to surgically update inputs | 13:01:53 | |
hmmmm, not quite? this is the error i get now. seems like digga didn't update? ` trace: warning: You are accessing a deprecated item of the digga lib. Please update timely, it will be remove soon. trace: warning: Deprecated Function: lib.importModules. Use lib.importExportableModules instead to set error: ERROR: The | 13:07:57 | |
* hmmmm, not quite? this is the error i get now. seems like digga didn't update? `trace: warning: You are accessing a deprecated item of the digga lib. Please update timely, it will be remove soon. trace: warning: Deprecated Function: lib.importModules. Use lib.importExportableModules instead to set error: ERROR: The | 13:08:13 | |
* hmmmm, not quite? this is the error i get now. seems like digga didn't update? `trace: warning: You are accessing a deprecated item of the digga lib. Please update timely, it will be remove soon. trace: warning: Deprecated Function: lib.importModules. Use lib.importExportableModules instead to set exportedModules option error: ERROR: The externalModules option has been removed.
Any modules that should be exported should be defined with the | 13:08:43 | |
are you using the latest devos changes in your Repo? | 13:09:25 | |
yeah, i made all the changes here: https://github.com/divnix/devos/pull/403/files#diff-206b9ce276ab5971a2489d75eb1b12999d4bf3843b7988cbe8d687cfde61dea0 | 13:09:43 | |
but i didn't pull the repo | 13:09:54 |