chaos/nixfiles
1
0
Fork 0
Code Issues 2 Releases Activity

disable auto-secrets for vault

Browse source
This commit is contained in:
chaos 2023-09-20 18:08:00 +01:00
parent 8aa000a506
commit c3575e0d27
No known key found for this signature in database
1 changed files with 2 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
hosts/vault/secrets.nix
View file

@ -1,10 +1,4 @@
{...}: { {...}: {
# Since this is the machine that hosts vault
systemd.services.vault = {
before = ["auto-secrets.service"];
serviceConfig.PartOf = ["auto-secrets.service"];
};
services.secrets = { services.secrets = {
enable = true; enable = true;
@ -16,7 +10,8 @@
}; };
autoSecrets = { autoSecrets = {
enable = true; # won't work when sealed
enable = false;
}; };
requiredVaultPaths = [ requiredVaultPaths = [