diff options
author | lassulus <lassulus@lassul.us> | 2020-08-06 23:24:29 +0200 |
---|---|---|
committer | lassulus <lassulus@lassul.us> | 2020-08-06 23:24:29 +0200 |
commit | e0e91cfd74c9ce5d3f9ce9c2e2efab322a00f960 (patch) | |
tree | f17565a1d7bc496b0b439ff45010f3f9c91c6d4f /krebs/3modules/repo-sync.nix | |
parent | 04d9ff2dcdc039518391fcb41ffbb256e2f4ba23 (diff) | |
parent | 42df7da046f46efaca0cb0243a6de3aff599c8aa (diff) |
Merge remote-tracking branch 'ni/master'
Diffstat (limited to 'krebs/3modules/repo-sync.nix')
-rw-r--r-- | krebs/3modules/repo-sync.nix | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/krebs/3modules/repo-sync.nix b/krebs/3modules/repo-sync.nix index 45d9d81c3..91111f3eb 100644 --- a/krebs/3modules/repo-sync.nix +++ b/krebs/3modules/repo-sync.nix @@ -124,6 +124,7 @@ let privateKeyFile = mkOption { type = types.secret-file; default = { + name = "repo-sync-key"; path = "${cfg.stateDir}/ssh.priv"; owner = cfg.user; source-path = toString <secrets> + "/repo-sync.ssh.key"; @@ -166,7 +167,13 @@ let }); in nameValuePair "repo-sync-${name}" { description = "repo-sync"; - after = [ "network.target" "secret.service" ]; + after = [ + config.krebs.secret.files.repo-sync-key.service + "network.target" + ]; + partOf = [ + config.krebs.secret.files.repo-sync-key.service + ]; environment = { GIT_SSH_COMMAND = "${pkgs.openssh}/bin/ssh -i ${cfg.stateDir}/ssh.priv"; |