| 13 May 2023 |
Ilan Joselevich (Kranzes) | Between HM and NixOS module | 11:54:13 |
| 15 May 2023 |
| j0 changed their profile picture. | 10:41:32 |
David A. Buser (boozedog) | hi! i am trying out the tutorial from agenix and running into a problem: when I get to step 4, i get an error:
agenix -e ./secret1.age
error: attribute './secret1.age' missing
| 14:58:50 |
Ilan Joselevich (Kranzes) | The UX isn't great in that regard, you need to first add the secret to the secrets.nix file | 15:00:10 |
David A. Buser (boozedog) | i think it's there, based on the tutorial i have this:
"secret1.age".publicKeys = [ myuser myhost ];
| 15:01:13 |
David A. Buser (boozedog) | (added in step 3 of tutorial https://github.com/ryantm/agenix#tutorial ) | 15:02:39 |
David A. Buser (boozedog) | OK I must've messed up my secrets.nix file b/c now it's working! | 18:39:55 |
David A. Buser (boozedog) | next question ... is it possible to encrypt a value directly into my nix config and access the value via config. ? I have a value that I don't want to put directly into git, but i want to reference it in my nginx config. some other tool perhaps? | 18:41:14 |
cole-h | As far as I know, no. You'll need to direct nginx to read the decrypted file. | 18:41:52 |
David A. Buser (boozedog) | use case is a Slack webhook, i don't want to publish the webhook URL directly in a git repo, but I do want nginx to proxy to that URL | 18:42:50 |
cole-h | nginx supports an include so you might be able to make the secret into a valid nginx config and then include the path of the decrypted secret. | 18:43:57 |
cole-h | * nginx supports an include directive so you might be able to make the secret into a valid nginx config and then include the path of the decrypted secret. | 18:44:03 |
David A. Buser (boozedog) | nice, i will take a look at that. | 18:44:12 |
cole-h | https://nginx.org/en/docs/ngx_core_module.html#include | 18:44:18 |
David A. Buser (boozedog) | appreciate the help! | 18:44:32 |
| 21 May 2023 |
REASON...UNKNOWN | is there some way to splat the contents of a file into a new secret without actual copy&paste? maybe by setting EDITOR appropriately? ive tried a dozen things but cant get it | 02:16:58 |
Nicolas Lenz | In reply to @ctx:kungfu-g.rip is there some way to splat the contents of a file into a new secret without actual copy&paste? maybe by setting EDITOR appropriately? ive tried a dozen things but cant get it agenix -d input.age | EDITOR=cat agenix -e output.age using pipes seems to work for me (given that both input.age and output.age are defined in secrets.age) | 13:20:43 |
| 27 May 2023 |
| NixOS Moderation Botchanged room power levels. | 16:40:19 |
| 30 May 2023 |
| vlashada joined the room. | 22:34:05 |
vlashada | What is the purpose of agenix? Can I use it to add ssh keys and password store to my dotfiles git repo? | 22:36:06 |
vlashada | * What is the purpose of agenix? Can I use it to add ssh keys and password store to my dotfiles git repo? Can I add the file secrets.nix and for instance my-server.pub.age and my-server.age files to a folder inside my git repo? | 22:41:55 |
| 31 May 2023 |
ryantm | The purpose is to deliver secrets to NixOS machines in a secure and ergonomic manner. | 00:02:50 |
| 1 Jun 2023 |
| raphi changed their display name from raphi to raphi (element unread channel fix when). | 13:03:19 |
| 2 Jun 2023 |
| Lukas joined the room. | 22:54:26 |
| 3 Jun 2023 |
| Secirian left the room. | 11:06:42 |
| noonien left the room. | 20:17:20 |
| 4 Jun 2023 |
| Federico Damián Schonborn changed their profile picture. | 17:40:30 |
| Faust joined the room. | 21:25:19 |
| 7 Jun 2023 |
| nebucatnetzer13 joined the room. | 21:47:00 |
| 8 Jun 2023 |
| bjrnmrtns joined the room. | 19:12:59 |