cluster/services/storage: define snakeoil passphrase for heresy, ensure encryption
This commit is contained in:
parent
a48ee00f3d
commit
d1f2bc1227
3 changed files with 11 additions and 0 deletions
|
@ -32,6 +32,8 @@ in
|
|||
heresy = [
|
||||
./heresy.nix
|
||||
./s3ql-upgrades.nix
|
||||
] ++ lib.optionals config.simulacrum [
|
||||
./simulacrum/snakeoil-heresy-passphrase.nix
|
||||
];
|
||||
garage = [
|
||||
./garage.nix
|
||||
|
|
|
@ -11,6 +11,7 @@
|
|||
unitDescription = "Heresy Filesystem";
|
||||
authFile = ./secrets/heresy-encryption-key.age;
|
||||
underlay = "heresy";
|
||||
encrypt = true;
|
||||
};
|
||||
};
|
||||
}
|
||||
|
|
|
@ -0,0 +1,8 @@
|
|||
{
|
||||
environment.etc."dummy-secrets/storageAuth-heresy".text = ''
|
||||
[local]
|
||||
storage-url: local://
|
||||
fs-passphrase: simulacrum
|
||||
'';
|
||||
}
|
||||
|
Loading…
Reference in a new issue