don't copy secret files to store during nixops deployment

This commit is contained in:
Erik Arvstedt
2020-01-12 20:02:00 +01:00
parent f0a36fe0c7
commit cd0fd6926b
2 changed files with 15 additions and 4 deletions
+4 -4
View File
@@ -44,28 +44,28 @@ let
permissions = "0440";
};
nginx_key = {
keyFile = ../secrets/nginx.key;
keyFile = toString ../../secrets/nginx.key;
destDir = "/secrets/";
user = "nginx";
group = "root";
permissions = "0440";
};
nginx_cert = {
keyFile = ../secrets/nginx.cert;
keyFile = toString ../../secrets/nginx.cert;
destDir = "/secrets/";
user = "nginx";
group = "root";
permissions = "0440";
};
lnd_key = {
keyFile = ../secrets/lnd.key;
keyFile = toString ../../secrets/lnd.key;
destDir = "/secrets/";
user = "lnd";
group = "lnd";
permissions = "0440";
};
lnd_cert = {
keyFile = ../secrets/lnd.cert;
keyFile = toString ../../secrets/lnd.cert;
destDir = "/secrets/";
user = "lnd";
group = "lnd";