Commit Graph

17 Commits (5aa5a794fdd02ad00d461488796388e1159ad004)

Author SHA1 Message Date
Jean-François Roche 3a1c9b1c64
fix: add missing dependency on systemd-vaultd socket ()
The systemd service unit file generate environment file requests secrets
from the systemd-vaultd socket.

We make sure this socket is ready before starting the service.
Jörg Thalheim fd6e4709c8 vault-agent: link to new getent
Jean-François Roche 35dc7e58ed fix: vault agent with environment secrets only
Sometimes we only need to inject secrets as environment variables
Jean-François Roche ad5f37f7a8 feat: add optional command timeout
Some template command can last longer than the default 30s. Add option
to override default timeout.

Define template commands using `exec` as `command` is deprecated.
(https://developer.hashicorp.com/vault/docs/agent/template#command)
Jörg Thalheim 97b656163a get rid systemd patches
Jörg Thalheim 12707af861 fix changeAction==none case
Jörg Thalheim 16ab6ae069 apply treefmt
Jörg Thalheim 1b025cde78 systemd: fetch regression patch
Jörg Thalheim 5ec7d0120a nixos/vault-agent: default to stopIfChanged
Jörg Thalheim 7fa8deb568 add support for environment variables
Jörg Thalheim cc1e801174 add test and fix systemd to reload secrets on reload
Jörg Thalheim bd069c7295 vault-secrets: change action from none to reload-or-restart
Jörg Thalheim 06495a406e add vault.secrets options to systemd services
Jörg Thalheim 6da13d433c nixos/systemd-vaultd: don't stop on nixos upgrades
zimbatm 974032c41a
treefmt
Jörg Thalheim 46bc2aa7a1 add systemd-vaultd nixos module and test
Jörg Thalheim fca242ec8d add vaultAgent module + test