chore: move generated secrets to separate directory

This commit is contained in:
oddlama 2023-07-31 12:42:46 +02:00
parent eeac57d30d
commit 788e7e3fa7
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
27 changed files with 42 additions and 63 deletions

View file

@ -14,10 +14,7 @@ in {
networking.providedDomains.loki = lokiDomain;
age.secrets.loki-basic-auth-hashes = {
rekeyFile = config.node.secretsDir + "/loki-basic-auth-hashes.age";
# Copy only the script so the dependencies can be added by the nodes
# that define passwords (using distributed-config).
generator.script = config.age.generators.basic-auth.script;
generator.script = "basic-auth";
mode = "440";
group = "nginx";
};