mynix/agenix
1
0
Fork 0
mirror of https://github.com/ryantm/agenix.git synced 2024-11-22 17:50:48 +03:00
Code Issues Projects Releases Packages Wiki Activity
96 commits 4 branches 12 tags 604 KiB
Commit graph

96 commits

This branch
This branch
All branches
Author SHA1 Message Date
Ryan Mulligan
c81f804195
Merge pull request #20 from felixscheinost/master 
Need Foundation to build i18n-embed-fl on darwin
 2021-02-08 18:46:27 -08:00
Felix Scheinost
cd916fad67 Need Foundation to build i18n-embed-fl on darwin 2021-02-04 21:21:23 +01:00
Rien Maertens
017422ed4c
Conditionally build rage if version is below 0.5.0 2021-01-31 22:39:30 +01:00
Rien Maertens
a678a8748c
Update rage to latest package definition 2021-01-31 22:39:25 +01:00
Ryan Mulligan
37b1d2aa3f
Merge pull request #12 from blaggacao/da-overlay 
add overlay
 2020-12-30 13:43:18 -08:00
David Arnold
56b1cb99da
Update overlay.nix 
Co-authored-by: Ryan Mulligan <ryan@ryantm.com>
 2020-12-30 16:18:38 -05:00
David Arnold
f477ca6041
add overlay 2020-12-28 22:39:16 -05:00
Ryan Mulligan
85fd85e318
Merge pull request #10 from AluisioASG/all-non-root-secrets 
correctly list non-root secrets
 2020-12-21 21:40:20 -08:00
Aluísio Augusto Silva Gonçalves
b0a48f587e
correctly list non-root secrets 
Secrets that are only partly owned by root (i.e. either user or group
are not 'root') are now accounted for during activation.
 2020-12-22 01:34:35 -03:00
Ryan Mulligan
553d1f5caa Merge branch 'flake-nixos-module' 2020-12-19 09:44:43 -08:00
Ryan Mulligan
920acdd8ff add verbose flag 2020-12-19 08:53:44 -08:00
Aluísio Augusto Silva Gonçalves
c1cbfe75b0
export module as system-independent flake output 
Flake outputs are a mixture of system-dependent and system-independent
sets, and flake-utils doesn't do much to distinguish one from the other.
Because of that, the `age` NixOS module currently has to be acessed as
`agenix.nixosModules.${system}.age`, rather than the documented
`agenix.nixosModules.age`.

To remedy that, (conceptually) split `outputs` in two, let flake-utils
handle the system-dependent half, and merge them to form the actual
outputs.  The names for the two halves were taken from [1].

[1]: https://github.com/NixOS/nix/issues/3843#issuecomment-661720562
 2020-12-19 01:53:37 -03:00
Ryan Mulligan
092ba8b166
Merge pull request #7 from ryantm/issue5 
use only ~/.ssh/id_rsa and ~/.ssh/id_ed25519 for decryption; friendlier error message when no identity
 2020-12-18 20:07:22 -08:00
Ryan Mulligan
de625b5298 add friendlier error message in the event of no identity 
fixes #6
 2020-12-18 20:02:13 -08:00
Ryan Mulligan
be7bad2c12 use only ~/.ssh/id_rsa and ~/.ssh/id_ed25519 for decryption 
fixes #5
 2020-12-18 19:23:47 -08:00
Ryan Mulligan
8af97149b2 Add notice about password-protected ssh keys 2020-12-18 15:41:06 -08:00
Ryan Mulligan
d42ba6964b
Merge pull request #3 from bbigras/patch-1 
fix typo in README
 2020-12-18 11:48:49 -08:00
Bruno Bigras
2f2b526539
fix typo in README 2020-12-18 19:37:23 +00:00
Ryan Mulligan
fbd9e29ac9 add notice about root-owned secrets 2020-12-18 10:09:17 -08:00
Ryan Mulligan
0650e51720 update README 2020-12-18 09:49:50 -08:00
Ryan Mulligan
baf623214b Merge branch 'master' of github.com:ryantm/age-nix into master 2020-11-20 17:55:23 -08:00
Ryan Mulligan
fd34de02a2 more messages while activationscript run & make sure directory exists before decrypting 2020-11-20 16:28:37 -08:00
Ryan Mulligan
5fcb31e390 show age binary version and path in help message 2020-09-18 13:13:54 -07:00
Ryan Mulligan
07ce686870 use unstable verison of rage in place of age 
* age limits the number of recipients to 20
* the latest release of rage (0.4.0) doesn't work with ssh-rsa keys
 2020-09-18 12:42:20 -07:00
Ryan Mulligan
aecba55db6 install root owned secrets sooner 2020-09-09 20:44:45 -07:00
Ryan Mulligan
d2dc883f3a README rewording 2020-09-04 07:13:03 -07:00
Ryan Mulligan
c89ed72dc6 rename public_keys to publicKeys 
more idiomatic
 2020-09-03 21:13:10 -07:00
Ryan Mulligan
5e68735d26 README improvements 2020-09-03 21:12:02 -07:00
Ryan Mulligan
f38625001d exit of sub commands fail; don't re-encrypt if there is no diff; apply some shellcheck suggestions 2020-09-03 16:51:23 -07:00
Ryan Mulligan
b381af08ec use nix-instantiate instead of nix eval 
it has a more stable API
 2020-09-03 16:07:43 -07:00
Ryan Mulligan
ac8d259fb9 fix spacing 2020-09-03 15:19:30 -07:00
Ryan Mulligan
7957842d88 use Nix instead of YAML 2020-09-03 15:18:20 -07:00
Ryan Mulligan
91ff516ef6 fix description of secretType.path 
It talked about symlinks which isn't a feature of this yet.
 2020-09-03 13:41:45 -07:00
Ryan Mulligan
1f7893895f README wording 2020-09-03 13:35:15 -07:00
Ryan Mulligan
0865860e1c fix README syntax 2020-09-03 13:25:24 -07:00
Ryan Mulligan
2e495e5ab5 remove old script file 2020-09-03 13:21:43 -07:00
Ryan Mulligan
3439d73a9b fix readme list indent 2020-09-03 13:18:21 -07:00
Ryan Mulligan
adc97bd3c5 add README and examples 2020-09-03 13:16:44 -07:00
Ryan Mulligan
de367934a7 add initial README 2020-09-03 12:03:01 -07:00
Ryan Mulligan
79244b4fc3 add flake and default .nix files; add agenix command 2020-09-03 11:24:33 -07:00
Ryan Mulligan
4c2fd23693 add flake 2020-09-02 20:49:24 -07:00
Ryan Mulligan
c77d82e784 move identities definition to top too 2020-09-01 14:29:37 -07:00
Ryan Mulligan
4b6b3bba3d move installation instructions to top 
they are the most important part for someone to review
 2020-09-01 14:27:54 -07:00
Ryan Mulligan
568dede67c don't expose decrypted secret during installation 2020-08-31 22:21:50 -07:00
Ryan Mulligan
9388c9bbad remove trace 2020-08-31 22:18:40 -07:00
Ryan Mulligan
202ea075cf initial prototype 2020-08-31 21:37:26 -07:00