Make RPC password a secret

2018-11-28 22:58:36 +00:00
parent c4935008dc
commit 94258c505e
5 changed files with 22 additions and 28 deletions
@@ -1,3 +1,6 @@
+let
+  secrets = import ./secrets/secrets.nix;
+in
 {
  bitcoin-node =
    { config, pkgs, ... }:
@@ -5,5 +8,11 @@
      deployment.virtualbox.memorySize = 2048; # megabytes
      deployment.virtualbox.vcpu = 2; # number of cpus
      deployment.virtualbox.headless = true;
+
+      deployment.keys.bitcoin-rpcpassword.text = secrets.bitcoinrpcpassword;
+      deployment.keys.bitcoin-rpcpassword.destDir = "/secrets/";
+      deployment.keys.bitcoin-rpcpassword.user = "bitcoin";
+      deployment.keys.bitcoin-rpcpassword.group = "bitcoinrpc";
+      deployment.keys.bitcoin-rpcpassword.permissions = "0440";
    };
 }