ringofstorms/dotfiles
ringofstorms/dotfiles
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Persist OpenBao secrets in /var/lib and make readiness non-blocking

Browse source
This commit is contained in:
Joshua Bell 2026-01-27 17:28:39 -06:00
parent 8b54a94c54
commit 15fccd2ff4
6 changed files with 123 additions and 85 deletions
Download patch file Download diff file Expand all files Collapse all files

4
flakes/secrets-bao/flake.nix
View file

@ -42,7 +42,7 @@
fragments = builtins.attrValues (builtins.mapAttrs (
name: s:
let
secretPath = s.path or ("/run/secrets/" + name);
secretPath = s.path or ("/var/lib/openbao-secrets/" + name);
in
substitute secretPath (s.configChanges or { })
) secrets);
@ -85,7 +85,7 @@
fragments = builtins.attrValues (builtins.mapAttrs (
name: s:
let
secretPath = s.path or ("/run/secrets/" + name);
secretPath = s.path or ("/var/lib/openbao-secrets/" + name);
in
substitute secretPath (s.hmChanges or { })
) secrets);