cluster/services/storage: define snakeoil passphrase for heresy, ensure encryption

This commit is contained in:
Max Headroom 2024-08-11 01:29:19 +02:00
parent b6a9759dc7
commit ba1fdb69c1
3 changed files with 11 additions and 0 deletions

View file

@ -32,6 +32,8 @@ in
heresy = [
./heresy.nix
./s3ql-upgrades.nix
] ++ lib.optionals config.simulacrum [
./simulacrum/snakeoil-heresy-passphrase.nix
];
garage = [
./garage.nix

View file

@ -11,6 +11,7 @@
unitDescription = "Heresy Filesystem";
authFile = ./secrets/heresy-encryption-key.age;
underlay = "heresy";
encrypt = true;
};
};
}

View file

@ -0,0 +1,8 @@
{
environment.etc."dummy-secrets/storageAuth-heresy".text = ''
[local]
storage-url: local://
fs-passphrase: simulacrum
'';
}