mynix/agenix
1
0
Fork 0
mirror of https://github.com/ryantm/agenix.git synced 2024-11-25 19:18:28 +03:00
Code Issues Projects Releases Packages Wiki Activity
144 commits 4 branches 12 tags 611 KiB
Commit graph

144 commits

This branch
This branch
All branches
Author SHA1 Message Date
Rien Maertens
017422ed4c
Conditionally build rage if version is below 0.5.0 2021-01-31 22:39:30 +01:00
Rien Maertens
a678a8748c
Update rage to latest package definition 2021-01-31 22:39:25 +01:00
Ryan Mulligan
37b1d2aa3f
Merge pull request #12 from blaggacao/da-overlay 
add overlay
 2020-12-30 13:43:18 -08:00
David Arnold
56b1cb99da
Update overlay.nix 
Co-authored-by: Ryan Mulligan <ryan@ryantm.com>
 2020-12-30 16:18:38 -05:00
David Arnold
f477ca6041
add overlay 2020-12-28 22:39:16 -05:00
Ryan Mulligan
85fd85e318
Merge pull request #10 from AluisioASG/all-non-root-secrets 
correctly list non-root secrets
 2020-12-21 21:40:20 -08:00
Aluísio Augusto Silva Gonçalves
b0a48f587e
correctly list non-root secrets 
Secrets that are only partly owned by root (i.e. either user or group
are not 'root') are now accounted for during activation.
 2020-12-22 01:34:35 -03:00
Ryan Mulligan
553d1f5caa Merge branch 'flake-nixos-module' 2020-12-19 09:44:43 -08:00
Ryan Mulligan
920acdd8ff add verbose flag 2020-12-19 08:53:44 -08:00
Aluísio Augusto Silva Gonçalves
c1cbfe75b0
export module as system-independent flake output 
Flake outputs are a mixture of system-dependent and system-independent
sets, and flake-utils doesn't do much to distinguish one from the other.
Because of that, the `age` NixOS module currently has to be acessed as
`agenix.nixosModules.${system}.age`, rather than the documented
`agenix.nixosModules.age`.

To remedy that, (conceptually) split `outputs` in two, let flake-utils
handle the system-dependent half, and merge them to form the actual
outputs.  The names for the two halves were taken from [1].

[1]: https://github.com/NixOS/nix/issues/3843#issuecomment-661720562
 2020-12-19 01:53:37 -03:00
Ryan Mulligan
092ba8b166
Merge pull request #7 from ryantm/issue5 
use only ~/.ssh/id_rsa and ~/.ssh/id_ed25519 for decryption; friendlier error message when no identity
 2020-12-18 20:07:22 -08:00
Ryan Mulligan
de625b5298 add friendlier error message in the event of no identity 
fixes #6
 2020-12-18 20:02:13 -08:00
Ryan Mulligan
be7bad2c12 use only ~/.ssh/id_rsa and ~/.ssh/id_ed25519 for decryption 
fixes #5
 2020-12-18 19:23:47 -08:00
Ryan Mulligan
8af97149b2 Add notice about password-protected ssh keys 2020-12-18 15:41:06 -08:00
Ryan Mulligan
d42ba6964b
Merge pull request #3 from bbigras/patch-1 
fix typo in README
 2020-12-18 11:48:49 -08:00
Bruno Bigras
2f2b526539
fix typo in README 2020-12-18 19:37:23 +00:00
Ryan Mulligan
fbd9e29ac9 add notice about root-owned secrets 2020-12-18 10:09:17 -08:00
Ryan Mulligan
0650e51720 update README 2020-12-18 09:49:50 -08:00
Ryan Mulligan
baf623214b Merge branch 'master' of github.com:ryantm/age-nix into master 2020-11-20 17:55:23 -08:00
Ryan Mulligan
fd34de02a2 more messages while activationscript run & make sure directory exists before decrypting 2020-11-20 16:28:37 -08:00
Ryan Mulligan
5fcb31e390 show age binary version and path in help message 2020-09-18 13:13:54 -07:00
Ryan Mulligan
07ce686870 use unstable verison of rage in place of age 
* age limits the number of recipients to 20
* the latest release of rage (0.4.0) doesn't work with ssh-rsa keys
 2020-09-18 12:42:20 -07:00
Ryan Mulligan
aecba55db6 install root owned secrets sooner 2020-09-09 20:44:45 -07:00
Ryan Mulligan
d2dc883f3a README rewording 2020-09-04 07:13:03 -07:00
Ryan Mulligan
c89ed72dc6 rename public_keys to publicKeys 
more idiomatic
 2020-09-03 21:13:10 -07:00
Ryan Mulligan
5e68735d26 README improvements 2020-09-03 21:12:02 -07:00
Ryan Mulligan
f38625001d exit of sub commands fail; don't re-encrypt if there is no diff; apply some shellcheck suggestions 2020-09-03 16:51:23 -07:00
Ryan Mulligan
b381af08ec use nix-instantiate instead of nix eval 
it has a more stable API
 2020-09-03 16:07:43 -07:00
Ryan Mulligan
ac8d259fb9 fix spacing 2020-09-03 15:19:30 -07:00
Ryan Mulligan
7957842d88 use Nix instead of YAML 2020-09-03 15:18:20 -07:00
Ryan Mulligan
91ff516ef6 fix description of secretType.path 
It talked about symlinks which isn't a feature of this yet.
 2020-09-03 13:41:45 -07:00
Ryan Mulligan
1f7893895f README wording 2020-09-03 13:35:15 -07:00
Ryan Mulligan
0865860e1c fix README syntax 2020-09-03 13:25:24 -07:00
Ryan Mulligan
2e495e5ab5 remove old script file 2020-09-03 13:21:43 -07:00
Ryan Mulligan
3439d73a9b fix readme list indent 2020-09-03 13:18:21 -07:00
Ryan Mulligan
adc97bd3c5 add README and examples 2020-09-03 13:16:44 -07:00
Ryan Mulligan
de367934a7 add initial README 2020-09-03 12:03:01 -07:00
Ryan Mulligan
79244b4fc3 add flake and default .nix files; add agenix command 2020-09-03 11:24:33 -07:00
Ryan Mulligan
4c2fd23693 add flake 2020-09-02 20:49:24 -07:00
Ryan Mulligan
c77d82e784 move identities definition to top too 2020-09-01 14:29:37 -07:00
Ryan Mulligan
4b6b3bba3d move installation instructions to top 
they are the most important part for someone to review
 2020-09-01 14:27:54 -07:00
Ryan Mulligan
568dede67c don't expose decrypted secret during installation 2020-08-31 22:21:50 -07:00
Ryan Mulligan
9388c9bbad remove trace 2020-08-31 22:18:40 -07:00
Ryan Mulligan
202ea075cf initial prototype 2020-08-31 21:37:26 -07:00