Create separate prod/staging nidus-sync sops environments

This commit is contained in:
Eli Ribble 2026-02-18 06:02:47 +00:00
parent f86239a8ce
commit 31335d19f7
No known key found for this signature in database
5 changed files with 64 additions and 1 deletions

View file

@ -25,6 +25,10 @@ in {
type = types.str;
};
enable = mkEnableOption "custom nidus-sync configuration";
environment = mkOption {
example = "prod";
type = types.str;
};
};
config = mkIf config.myModules.nidus-sync.enable {
@ -92,7 +96,7 @@ in {
mode = "0440";
owner = "${user}";
restartUnits = ["${nidusName}-webserver.service"];
sopsFile = ../../secrets/${nidusName}.env;
sopsFile = ../../secrets/${cfg.environment}/${nidusName}.env;
};
systemd.services."${nidusName}-webserver" = {
after=["network.target" "network-online.target"];