Create separate prod/staging nidus-sync sops environments
This commit is contained in:
parent
f86239a8ce
commit
31335d19f7
5 changed files with 64 additions and 1 deletions
|
|
@ -25,6 +25,10 @@ in {
|
|||
type = types.str;
|
||||
};
|
||||
enable = mkEnableOption "custom nidus-sync configuration";
|
||||
environment = mkOption {
|
||||
example = "prod";
|
||||
type = types.str;
|
||||
};
|
||||
};
|
||||
|
||||
config = mkIf config.myModules.nidus-sync.enable {
|
||||
|
|
@ -92,7 +96,7 @@ in {
|
|||
mode = "0440";
|
||||
owner = "${user}";
|
||||
restartUnits = ["${nidusName}-webserver.service"];
|
||||
sopsFile = ../../secrets/${nidusName}.env;
|
||||
sopsFile = ../../secrets/${cfg.environment}/${nidusName}.env;
|
||||
};
|
||||
systemd.services."${nidusName}-webserver" = {
|
||||
after=["network.target" "network-online.target"];
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue