Commit Graph

122 Commits (5a3fdf89d7b9f16aa8c829d2a06d8accb24b0ba0)
 

Author SHA1 Message Date
Jörg Thalheim d01702db6f
Merge pull request from numtide/ci
flake.lock: Update
Jörg Thalheim 96baf631d1 also add patched systemd to devshell
Jörg Thalheim 04fc1d1646 update bors configuration
Jörg Thalheim 16ab6ae069 apply treefmt
Jörg Thalheim cc78160e6e add treefmt-nix
Jörg Thalheim 05bce1e1f8 flake.lock: Update
Flake lock file updates:

• Updated input 'flake-parts':
    'github:hercules-ci/flake-parts/3f7172646953bf86dad5953bc45f0edae62ac445' (2022-12-18)
  → 'github:hercules-ci/flake-parts/82c16f1682cf50c01cb0280b38a1eed202b3fe9f' (2023-01-10)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/eb37a7f66312e845fba0b3cc7c36e727012b3dae' (2022-12-20)
  → 'github:NixOS/nixpkgs/81aef2338a3834f4d0071978dbc114497ec56a7e' (2023-01-17)
Jörg Thalheim 116c01575d
Merge pull request from numtide/ci
bump nixpkgs and flake-parts
Jörg Thalheim 1b025cde78 systemd: fetch regression patch
Jörg Thalheim aafb1c159c bump nixpkgs and flake-parts
bors[bot] 06f5b36c29
Merge
15: test that also the service main process can read updated secrets r=Mic92 a=Mic92



Co-authored-by: Jörg Thalheim <joerg@thalheim.io>
Jörg Thalheim e5e1cfd714 test that also the service main process can read updated secrets
bors[bot] b7c1cf587a
Merge
14: nixos/vault-agent: default to stopIfChanged r=Mic92 a=Mic92



Co-authored-by: Jörg Thalheim <joerg@thalheim.io>
Jörg Thalheim 5ec7d0120a nixos/vault-agent: default to stopIfChanged
Jörg Thalheim c19c8c1b24
Merge pull request from numtide/ci
add support for environment variables
Jörg Thalheim 7fa8deb568 add support for environment variables
Jörg Thalheim 6daead50b1
Merge pull request from numtide/ci
vault-secrets: change action from none to restart
Jörg Thalheim cc1e801174 add test and fix systemd to reload secrets on reload
Jörg Thalheim bd069c7295 vault-secrets: change action from none to reload-or-restart
Jörg Thalheim f86721c4d4
Merge pull request from numtide/ci
Ci
Jörg Thalheim aa418152b3 add bors.toml
Jörg Thalheim ed9c3d275b accept non string values in secret map
Jörg Thalheim c1a11deabe
Merge pull request from numtide/ci
add vault.secrets options to systemd services
Jörg Thalheim 06495a406e add vault.secrets options to systemd services
Jörg Thalheim 4513408db4
Merge pull request from numtide/ci
update README
Jörg Thalheim 4659edf942 update README
Jörg Thalheim 493a8fb26d
Merge pull request from numtide/ci
systemd-vaultd: switch to use a json file for reading files
Jörg Thalheim 194336d1d0 systemd-vaultd: switch to use a json file for reading files
Jonas Chevalier bd1c3bccdc
Merge pull request from numtide/runCommand
replace runCommandNoCC by runCommand
zimbatm d409d508a5
replace runCommandNoCC by runCommand
runCommandNoCC has been replaced by runCommand in nixpkgs
Jörg Thalheim d99afdeafd
Merge pull request from numtide/permissions
allow processes to read from secrets directory
Jörg Thalheim 44746e793b allow processes to read from secrets directory
Jörg Thalheim b32efc23a7
Merge pull request from numtide/readme
README: refactor the text a bit
zimbatm b79d65923d
README: refactor the text a bit
Jörg Thalheim 1c901c071c
Merge pull request from numtide/executable-procfile
make the Procfile executable
zimbatm 2c19dcf811
make the Procfile executable
Because.. why not :)
Jörg Thalheim 0ab471db02
Merge pull request from numtide/add-license-1
Create LICENSE
Jonas Chevalier bf7efc0a9e
Create LICENSE
Jörg Thalheim e2d7197f61
Merge pull request from numtide/no-sudo
Procfile: avoid using sudo
Jörg Thalheim 6da13d433c nixos/systemd-vaultd: don't stop on nixos upgrades
Jörg Thalheim 7cd4acbc14 switch to nixpkgs fork
zimbatm 09aeac2ff1
Procfile: avoid using sudo
Aside from the running-as-root issue, it also means that the user has to
enter their password sometimes, and that doesn't work really well with
hivemind.
zimbatm 974032c41a
treefmt
zimbatm f1df228d66
go fmt
Jörg Thalheim 2afab6a7ba update end-to-end procfile example
Jörg Thalheim 46bc2aa7a1 add systemd-vaultd nixos module and test
Jörg Thalheim 88d2fbd55d procfile: setup vault server
Jörg Thalheim 44db48cc89 watcher: don't exit event loop if there is no connection for a path
Jörg Thalheim 4513c4cd87 watcher: fix stale inotify fd
Jörg Thalheim 79f31c5e14 epoll: don't log errors if fd already has been removed
Jörg Thalheim db90aaf667 update Description of systemd-vaultd systemd units