nixos/containers: Fix agenix being broken with no dev key
This commit is contained in:
parent
106698b53e
commit
58b2c6d8c5
@ -265,6 +265,7 @@ in
|
||||
};
|
||||
|
||||
# age requires all keys to at least exist, even if they're not going to be used
|
||||
agenixMountSecrets.deps = [ "ensureDevKey" ];
|
||||
ensureDevKey.text =
|
||||
''
|
||||
[ ! -e "${devVMKeyPath}" ] && touch "${devVMKeyPath}"
|
||||
|
@ -26,7 +26,7 @@ in
|
||||
# Use the persit dir to grab the keys instead, otherwise they might not be ready. We can't really make
|
||||
# agenix depend on impermanence, since users depends on agenix (to decrypt passwords) and impermanence
|
||||
# depends on users
|
||||
(e: let pDir = config.my.tmproot.persistence.dir; in if pDir != null then "${pDir}/${e.path}" else e.path)
|
||||
(e: let pDir = config.my.tmproot.persistence.dir; in if pDir != null then "${pDir}${e.path}" else e.path)
|
||||
(lib.filter (e: e.type == "rsa" || e.type == "ed25519") config.services.openssh.hostKeys));
|
||||
};
|
||||
}
|
||||
|
Loading…
Reference in New Issue
Block a user