xin/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

fix: unused secret

Browse source
This commit is contained in:
xinyangli 2024-10-14 11:35:48 +08:00
parent a9b1d69386
commit af0e5ed742
Signed by: xin
SSH key fingerprint: SHA256:UU5pRTl7NiLFJbWJZa+snLylZSXIz5rgHmwjzv8v4oE
1 changed files with 0 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
machines/massicot/kanidm-provision.nix
View file

@ -1,15 +1,5 @@
{ config, lib, ... }: { config, lib, ... }:
{ {
sops.secrets = {
"kanidm/ocis_android_secret" = {
owner = "kanidm";
};
};
systemd.services.kanidm.serviceConfig = {
BindReadOnlyPaths = [
config.sops.secrets."kanidm/ocis_android_secret".path
];
};
services.kanidm.provision = { services.kanidm.provision = {
enable = true; enable = true;
autoRemove = true; autoRemove = true;