!XLCFfvFhUkYwOMLbVx:nixos.org

agenix

330 Members
age-encrypted secrets for NixOS https://github.com/ryantm/agenix/99 Servers

Load older messages


SenderMessageTime
21 Apr 2025
@wesleyjrz:matrix.orgwesleyjrz left the room.17:56:11
@wesleyjrz:matrix.orgwesleyjrz joined the room.17:56:44
24 Apr 2025
@k900:0upti.meK900 @ryantm can I get a merge on https://github.com/ryantm/agenix/pull/324 12:05:22
@k900:0upti.meK900OK took a bit of bashing12:22:13
@k900:0upti.meK900But it should be fine now12:22:16
@tebriel:frodux.nettebriel joined the room.18:24:27
@jon-zuka:matrix.orgJon Zuka joined the room.19:01:37
@jon-zuka:matrix.orgJon Zukahello, where do i create the secrets folder?19:54:51
25 Apr 2025
@mynacol:mynacol.xyz@mynacol:mynacol.xyz Hello everyone, I just tried to create a secret where the filename starts with a dash (-) for reasons, but that unfortunately doesn't work. The relevant error message is basename: invalid option -- 'd'. Is there a known workaround? 20:19:14
@eyjhb:eyjhb.dkeyJhb
In reply to @mynacol:mynacol.xyz
Hello everyone, I just tried to create a secret where the filename starts with a dash (-) for reasons, but that unfortunately doesn't work. The relevant error message is basename: invalid option -- 'd'. Is there a known workaround?
Making a file without a dash at the start! /s - But most likely its something that should be fixed in the code/module. It shouldn't treat filenames with dashes at the start like arguments. Can you create an issue for it?
21:07:44
@mynacol:mynacol.xyz@mynacol:mynacol.xyzI actually got to the bottom of it: https://github.com/ryantm/agenix/issues/32521:25:56
@eyjhb:eyjhb.dkeyJhb I think most of these places should just have e.g. basename -- "$FILE" instead, and it would be solved. Still no clue why you want files to begin with a dash :p 21:27:44
@mynacol:mynacol.xyz@mynacol:mynacol.xyzBasename explicitly does not seem to allow this syntax XD21:29:32
@mynacol:mynacol.xyz@mynacol:mynacol.xyzThe reason was I did a bit nix foo to make two rather complex attrsets based on a single string and this string should now also be empty, leaving a leading dash in the generated age file path21:30:53
26 Apr 2025
@mmkaram:matrix.orgmmkaram

would anyone know how to access an agenix decrypted file in home manager, for things in my configuration.nix file I use config.age.secrets.whatever but I've been told I shouldn't pass config into my home.nix file

06:58:20
@k900:0upti.meK900You use the agenix HM module 07:00:30
@k900:0upti.meK900 And then use HM's config 07:00:36
@mmkaram:matrix.orgmmkaram

so use

age.secrets = {};

in my home.nix?

07:01:24
@mmkaram:matrix.orgmmkaram

how would I access those variables in other parts of my home.nix

07:01:54
@mmkaram:matrix.orgmmkaram

again I'm used to the config.age.secrets syntax

07:02:11
@k900:0upti.meK900 You use config.age.secrets 07:05:47
@k900:0upti.meK900 Where config is passed down from HM 07:05:54
@k900:0upti.meK900You don't need to do that explicitly07:06:11
@mmkaram:matrix.orgmmkaram

seriously? my lsp says it can't find config which checks out because it's not an input to the home function

07:07:01
@k900:0upti.meK900You add it as an argument07:07:15
@mmkaram:matrix.orgmmkaram

okaaaay, and I can access the path from that I think, config.age.secrets.whatever.path

07:11:33
@mmkaram:matrix.orgmmkaramhow would I get what's actually in the value07:11:51
@mmkaram:matrix.orgmmkaram

builtins.readFile?

07:11:56
@k900:0upti.meK900That would entirely break the security model of agenix07:12:22
@mmkaram:matrix.orgmmkaramright yeah that makes sense07:12:35

Show newer messages


Back to Room ListRoom Version: 6