7eb31a5fcd
fix: remove the warning because it's wrong
...
/run/credentials is stable for system services.
Signed-off-by: Raito Bezarius <masterancpp@gmail.com>
1 month ago
9e07182d3e
feat(proxy): further adapt to openbao
...
Signed-off-by: Raito Bezarius <masterancpp@gmail.com>
1 month ago
8be31345fa
feat(agent): further adapt to openbao
...
Signed-off-by: Raito Bezarius <masterancpp@gmail.com>
1 month ago
5aa5a794fd
feat: further adapt to openbao
...
Signed-off-by: Raito Bezarius <masterancpp@gmail.com>
1 month ago
3a1c9b1c64
fix: add missing dependency on systemd-vaultd socket ( #59 )
...
The systemd service unit file generate environment file requests secrets
from the systemd-vaultd socket.
We make sure this socket is ready before starting the service.
5 months ago
fd6e4709c8
vault-agent: link to new getent
1 year ago
35dc7e58ed
fix: vault agent with environment secrets only
...
Sometimes we only need to inject secrets as environment variables
1 year ago
ad5f37f7a8
feat: add optional command timeout
...
Some template command can last longer than the default 30s. Add option
to override default timeout.
Define template commands using `exec` as `command` is deprecated.
(https://developer.hashicorp.com/vault/docs/agent/template#command )
1 year ago
97b656163a
get rid systemd patches
2 years ago
af90e52ec9
log in which assertions it fails
2 years ago
12707af861
fix changeAction==none case
2 years ago
8e4a523d36
drop applied systemd patch
2 years ago
16ab6ae069
apply treefmt
2 years ago
cc78160e6e
add treefmt-nix
2 years ago
1b025cde78
systemd: fetch regression patch
2 years ago
e5e1cfd714
test that also the service main process can read updated secrets
2 years ago
5ec7d0120a
nixos/vault-agent: default to stopIfChanged
2 years ago
7fa8deb568
add support for environment variables
2 years ago
cc1e801174
add test and fix systemd to reload secrets on reload
2 years ago
bd069c7295
vault-secrets: change action from none to reload-or-restart
2 years ago
06495a406e
add vault.secrets options to systemd services
2 years ago
194336d1d0
systemd-vaultd: switch to use a json file for reading files
2 years ago
d409d508a5
replace runCommandNoCC by runCommand
...
runCommandNoCC has been replaced by runCommand in nixpkgs
2 years ago
6da13d433c
nixos/systemd-vaultd: don't stop on nixos upgrades
2 years ago
974032c41a
treefmt
2 years ago
46bc2aa7a1
add systemd-vaultd nixos module and test
2 years ago
fca242ec8d
add vaultAgent module + test
2 years ago
4851891755
add flake and fix tests
2 years ago
6d0e119f13
add nixos test
2 years ago
9b26507e14
add treefmt check
2 years ago
Raito Bezarius
Jean-François Roche
Jörg Thalheim
zimbatm