ringofstorms/dotfiles
ringofstorms/dotfiles
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Persist OpenBao secrets in /var/lib and make readiness non-blocking

Browse source
This commit is contained in:
Joshua Bell 2026-01-27 17:28:39 -06:00
parent 8b54a94c54
commit 15fccd2ff4
6 changed files with 123 additions and 85 deletions
Download patch file Download diff file Expand all files Collapse all files

2
hosts/h001/flake.nix
View file

@ -90,7 +90,7 @@
owner = "root";
group = "root";
mode = "0400";
path = "/run/secrets/litellm.env";
# Uses default: /var/lib/openbao-secrets/litellm-env
softDepend = [ "litellm" ];
template = ''
{{- with secret "kv/data/machines/home/openrouter" -}}

2
hosts/h001/mods/litellm.nix
View file

@ -29,7 +29,7 @@ in
host = "0.0.0.0";
openFirewall = false;
package = pkgsLitellm.litellm;
environmentFile = "/run/secrets/litellm.env";
environmentFile = "/var/lib/openbao-secrets/litellm-env";
environment = {
SCARF_NO_ANALYTICS = "True";
DO_NOT_TRACK = "True";