b1e13e9415
Each secret file to be deployed is now backed by one local file. This simplifies 'setup-secrets' and the secret definitions. Also, with the old format it was not possible to add new secrets to secrets.nix in a simple way. Old secrets are automatically converted to the new format when running nix-shell. Using the new option 'nix-bitcoin.secrets', secrets are now directly defined by the services that use them.
11 lines
211 B
Nix
11 lines
211 B
Nix
{ pkgs }: with pkgs;
|
|
|
|
let
|
|
generate-secrets = callPackage ./. {};
|
|
in
|
|
writeScript "make-secrets" ''
|
|
# Update from old secrets format
|
|
[[ -e secrets.nix ]] && . ${./update-secrets.sh}
|
|
${generate-secrets}
|
|
''
|