b1e13e9415
Each secret file to be deployed is now backed by one local file. This simplifies 'setup-secrets' and the secret definitions. Also, with the old format it was not possible to add new secrets to secrets.nix in a simple way. Old secrets are automatically converted to the new format when running nix-shell. Using the new option 'nix-bitcoin.secrets', secrets are now directly defined by the services that use them.
25 lines
760 B
Nix
25 lines
760 B
Nix
let
|
|
nixpkgs = (import ./pkgs/nixpkgs-pinned.nix).nixpkgs;
|
|
in
|
|
with import nixpkgs { };
|
|
|
|
stdenv.mkDerivation rec {
|
|
name = "nix-bitcoin-environment";
|
|
|
|
nixops19_09 = callPackage ./pkgs/nixops {};
|
|
make-secrets = callPackage ./pkgs/generate-secrets/update-and-generate.nix {};
|
|
|
|
buildInputs = [ nixops19_09 figlet ];
|
|
|
|
shellHook = ''
|
|
export NIX_PATH="nixpkgs=${nixpkgs}:."
|
|
# ssh-agent and nixops don't play well together (see
|
|
# https://github.com/NixOS/nixops/issues/256). I'm getting `Received disconnect
|
|
# from 10.1.1.200 port 22:2: Too many authentication failures` if I have a few
|
|
# keys already added to my ssh-agent.
|
|
export SSH_AUTH_SOCK=""
|
|
figlet "nix-bitcoin"
|
|
(mkdir -p secrets; cd secrets; ${make-secrets})
|
|
'';
|
|
}
|