wip agenix changes

This commit is contained in:
Henry Hiles 2025-03-26 12:23:05 -04:00
parent 976c86b8e9
commit bfbab8799c
Signed by: Henry-Hiles
SSH key fingerprint: SHA256:VKQUdS31Q90KvX7EkKMHMBpUspcmItAh86a+v7PGiIs
4 changed files with 21 additions and 9 deletions

View file

@ -13,6 +13,7 @@
settings = { settings = {
service.DISABLE_REGISTRATION = true; service.DISABLE_REGISTRATION = true;
repository.GO_GET_CLONE_URL_PROTOCOL = "ssh"; repository.GO_GET_CLONE_URL_PROTOCOL = "ssh";
actions.DEFAULT_ACTIONS_URL = "github";
server = { server = {
DOMAIN = domain; DOMAIN = domain;

10
flake.lock generated
View file

@ -10,15 +10,15 @@
"systems": "systems" "systems": "systems"
}, },
"locked": { "locked": {
"lastModified": 1742517297, "lastModified": 1736955230,
"narHash": "sha256-VjwwSOo+GguEgQfIffuzOjEzuDzSVmkp79P66BkGVSE=", "narHash": "sha256-uenf8fv2eG5bKM8C/UvFaiJMZ4IpUFaQxk9OH5t/1gA=",
"owner": "Henry-Hiles", "owner": "ryantm",
"repo": "agenix", "repo": "agenix",
"rev": "bb138ac0e555de4f434b842099afd5e6c30b942b", "rev": "e600439ec4c273cf11e06fe4d9d906fb98fa097c",
"type": "github" "type": "github"
}, },
"original": { "original": {
"owner": "Henry-Hiles", "owner": "ryantm",
"repo": "agenix", "repo": "agenix",
"type": "github" "type": "github"
} }

View file

@ -3,7 +3,7 @@
nixpkgs.url = "github:nixos/nixpkgs?ref=nixos-unstable"; nixpkgs.url = "github:nixos/nixpkgs?ref=nixos-unstable";
simple-nixos-mailserver.url = "gitlab:simple-nixos-mailserver/nixos-mailserver"; simple-nixos-mailserver.url = "gitlab:simple-nixos-mailserver/nixos-mailserver";
agenix = { agenix = {
url = "github:Henry-Hiles/agenix"; url = "github:ryantm/agenix";
inputs.nixpkgs.follows = "nixpkgs"; inputs.nixpkgs.follows = "nixpkgs";
}; };
home-manager = { home-manager = {

View file

@ -1,6 +1,17 @@
{inputs, ...}: { {pkgs, ...}: {
wrappers.agenix = { wrappers.agenix = {
basePackage = inputs.agenix.packages.x86_64-linux.default; basePackage = pkgs.agenix-cli;
env.RULES.value = "keys.nix";
env.AGENIX_ROOT.value = let
path = ".agenix.toml";
in
pkgs.writeTextDir path (builtins.readFile (pkgs.writers.writeTOML path {
paths = [
{
glob = "**";
identities = import ../../secrets/keys.nix;
}
];
}));
}; };
} }