cluster/services/storage: define snakeoil passphrase for heresy, ensure encryption
This commit is contained in:
parent
9272c555bc
commit
ad65ad500e
3 changed files with 11 additions and 0 deletions
|
@ -32,6 +32,8 @@ in
|
||||||
heresy = [
|
heresy = [
|
||||||
./heresy.nix
|
./heresy.nix
|
||||||
./s3ql-upgrades.nix
|
./s3ql-upgrades.nix
|
||||||
|
] ++ lib.optionals config.simulacrum [
|
||||||
|
./simulacrum/snakeoil-heresy-passphrase.nix
|
||||||
];
|
];
|
||||||
garage = [
|
garage = [
|
||||||
./garage.nix
|
./garage.nix
|
||||||
|
|
|
@ -11,6 +11,7 @@
|
||||||
unitDescription = "Heresy Filesystem";
|
unitDescription = "Heresy Filesystem";
|
||||||
authFile = ./secrets/heresy-encryption-key.age;
|
authFile = ./secrets/heresy-encryption-key.age;
|
||||||
underlay = "heresy";
|
underlay = "heresy";
|
||||||
|
encrypt = true;
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
|
@ -0,0 +1,8 @@
|
||||||
|
{
|
||||||
|
environment.etc."dummy-secrets/storageAuth-heresy".text = ''
|
||||||
|
[local]
|
||||||
|
storage-url: local://
|
||||||
|
fs-passphrase: simulacrum
|
||||||
|
'';
|
||||||
|
}
|
||||||
|
|
Loading…
Reference in a new issue