SelfPrivacy
/
selfprivacy-nixos-config
6
3
Fork 6
Code Issues 15 Pull Requests 1 Projects Releases Wiki Activity

Move secrets out of Nix Store #19

Merged
inex merged 29 commits from its-wednesday-my-dudes into master 2022-07-19 15:18:46 +03:00
Conversation 0 Commits 29 Files Changed 14
inex commented 2022-07-19 15:17:30 +03:00
Owner

Nix store is world-readable, and while nix repl fails to get the secret due to file permissions, we should still set up secrets without getting them in Nix store.

In the past tmpfiles.d was used, but its entire contents get to the nix store.

Now, all files with secrets are generated in activation scripts, with the help of jq and sed.

Also dead Pleroma code was deleted, but CAPTCHA is still broken.

Bitwarden-rs was renamed to vaultwarden, thus dropping support for NixOS 21.05

Nix store is world-readable, and while nix repl fails to get the secret due to file permissions, we should still set up secrets without getting them in Nix store. In the past tmpfiles.d was used, but its entire contents get to the nix store. Now, all files with secrets are generated in activation scripts, with the help of jq and sed. Also dead Pleroma code was deleted, but CAPTCHA is still broken. Bitwarden-rs was renamed to vaultwarden, thus dropping support for NixOS 21.05
inex added 29 commits 2022-07-19 15:17:31 +03:00
cabe97f1e3 Fixes: 
- Bitwarden-rs → vaultwarden
- Add folder creation for rclone config
inex merged commit c1ed3a522c into master 2022-07-19 15:18:46 +03:00
inex deleted branch its-wednesday-my-dudes 2022-07-19 15:18:46 +03:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
Contributions welcome
   
Service packaging
   
bug

Something is not working   
duplicate

This issue or pull request already exists   
enhancement

New feature   
help wanted

Need some help   
invalid

Something is wrong   
question

More information is needed   
wontfix

This won't be fixed
No Label
Contributions welcome
Service packaging
bug
duplicate
enhancement
help wanted
invalid
question
wontfix
Milestone
Clear milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: SelfPrivacy/selfprivacy-nixos-config#19
There is no content yet.
Delete Branch "its-wednesday-my-dudes"

Deleting a branch is permanent. Although the deleted branch may exist for a short time before cleaning up, in most cases it CANNOT be undone. Continue?