!XLCFfvFhUkYwOMLbVx:nixos.org

agenix

255 Members
age-encrypted secrets for NixOS https://github.com/ryantm/agenix/81 Servers

Load older messages


SenderMessageTime
31 Aug 2024
@setthemfree:matrix.orgundltd Also, would it be possible to somehow use an agenix secret for one of the values in virtualisation.oci-containers.containers.<name>.environment? 16:32:35
@ryantm:matrix.orgryantmYes, you can use nix to read a directory's contents and use that as your secrets.nix output.18:31:59
@ryantm:matrix.orgryantmAre those containers built when building the OS? If so, no and there wouldn't be much point.18:33:46
@thedevofnight:matrix.org@thedevofnight:matrix.org joined the room.19:25:12
@thedevofnight:matrix.org@thedevofnight:matrix.org changed their display name from Devon Wolfe to thedevofnight.19:28:07
@thedevofnight:matrix.org@thedevofnight:matrix.org left the room.19:28:56
1 Sep 2024
@setthemfree:matrix.orgundltd
In reply to@ryantm:matrix.org
Are those containers built when building the OS? If so, no and there wouldn't be much point.
That is a good question... Looks like the containers are instantiated (podman / docker run) by a systemd unit, so that would be during activation. Also I notice there is an environmentFiles option that maps to docker run / podman run --env-file option, which should be ideal to use with agenix. So yeah, should work!
09:01:48
@setthemfree:matrix.orgundltd That is a good question... Looks like the containers are instantiated (podman / docker run) by a systemd unit, so that would be during boot / activation. Also I notice there is an environmentFiles option that maps to docker run / podman run --env-file option, which should be ideal to use with agenix. So yeah, should work! 09:02:16
@setthemfree:matrix.orgundltd
In reply to@ryantm:matrix.org
Yes, you can use nix to read a directory's contents and use that as your secrets.nix output.
How can I access nixpkgs' lib in secrets.nix?
09:37:51
@setthemfree:matrix.orgundltd (namely lib.attrsets.mergeAttrsList) 09:56:06
@ryantm:matrix.orgryantmSame way you would in any standalone nix file: let pks = import <nixpkgs> { config ={};}; in ... pkgs.lib11:03:09
@setthemfree:matrix.orgundltdThanks!12:32:12
3 Sep 2024
@djacu:matrix.org@djacu:matrix.org left the room.23:29:28
5 Sep 2024
@lingo5080:matrix.orglingo5080 joined the room.15:55:25
6 Sep 2024
@tdjordan:matrix.orgThom Jordan joined the room.18:19:09
7 Sep 2024
@madonius:entropia.de/madonius[er|he]Cheers13:35:39
@madonius:entropia.de/madonius[er|he] I am trying to add agenix to a server's configuration and keep getting error: The optionage' does not exist. Definition values:` 13:36:25
@madonius:entropia.de/madonius[er|he] * I am trying to add agenix to a server's configuration and keep getting error: The optionage' does not exist. Definition values:` 13:36:31
@k900:0upti.meK900That usually means you didn't import the module13:36:41
@madonius:entropia.de/madonius[er|he] * I am trying to add agenix to a server's configuration and keep getting
error: The option`age' does not exist. Definition values:\
13:36:48
@madonius:entropia.de/madonius[er|he]I have agenix in my flakes.nix13:37:00
@madonius:entropia.de/madonius[er|he]both in inputs and outputs it's defined13:37:50
@madonius:entropia.de/madonius[er|he] do I have to use agenix 13:38:02
@k900:0upti.meK900That does not automatically include the module in your NixOS configs13:38:05
@madonius:entropia.de/madonius[er|he]ah ok13:38:14
@k900:0upti.meK900 You need to add agenix.nixosModules.default to your modules list in nixosSystem 13:38:20
@k900:0upti.meK900Or do something similar13:38:23
@madonius:entropia.de/madonius[er|he]that I have also done13:38:35
@k900:0upti.meK900Then it should work13:38:46
@k900:0upti.meK900Are you maybe mixing NixOS and home-manager contexts?13:38:53

Show newer messages


Back to Room ListRoom Version: 6