Commit Graph

80 Commits (7fa9e30111bc8b32bf69dba1c9907c551b301bb8)
 

Author SHA1 Message Date
Jörg Thalheim 7fa9e30111
add github settings
Jörg Thalheim c58cccffa4
Merge pull request from numtide/joerg-ci
CI
Jörg Thalheim f64507d4bc add ci workflow to update flake lock
bors[bot] 94c13296e3
Merge
19: CI r=Mic92 a=Mic92



Co-authored-by: Jörg Thalheim <joerg@thalheim.io>
Jörg Thalheim 12707af861 fix changeAction==none case
bors[bot] ee3c4a1363
Merge
18: CI r=Mic92 a=Mic92



Co-authored-by: Jörg Thalheim <joerg@thalheim.io>
Jörg Thalheim 8e4a523d36 drop applied systemd patch
Jörg Thalheim efb2a6e39b switch to nixos-unstable-small
Jörg Thalheim d01702db6f
Merge pull request from numtide/ci
flake.lock: Update
Jörg Thalheim 96baf631d1 also add patched systemd to devshell
Jörg Thalheim 04fc1d1646 update bors configuration
Jörg Thalheim 16ab6ae069 apply treefmt
Jörg Thalheim cc78160e6e add treefmt-nix
Jörg Thalheim 05bce1e1f8 flake.lock: Update
Flake lock file updates:

• Updated input 'flake-parts':
    'github:hercules-ci/flake-parts/3f7172646953bf86dad5953bc45f0edae62ac445' (2022-12-18)
  → 'github:hercules-ci/flake-parts/82c16f1682cf50c01cb0280b38a1eed202b3fe9f' (2023-01-10)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/eb37a7f66312e845fba0b3cc7c36e727012b3dae' (2022-12-20)
  → 'github:NixOS/nixpkgs/81aef2338a3834f4d0071978dbc114497ec56a7e' (2023-01-17)
Jörg Thalheim 116c01575d
Merge pull request from numtide/ci
bump nixpkgs and flake-parts
Jörg Thalheim 1b025cde78 systemd: fetch regression patch
Jörg Thalheim aafb1c159c bump nixpkgs and flake-parts
bors[bot] 06f5b36c29
Merge
15: test that also the service main process can read updated secrets r=Mic92 a=Mic92



Co-authored-by: Jörg Thalheim <joerg@thalheim.io>
Jörg Thalheim e5e1cfd714 test that also the service main process can read updated secrets
bors[bot] b7c1cf587a
Merge
14: nixos/vault-agent: default to stopIfChanged r=Mic92 a=Mic92



Co-authored-by: Jörg Thalheim <joerg@thalheim.io>
Jörg Thalheim 5ec7d0120a nixos/vault-agent: default to stopIfChanged
Jörg Thalheim c19c8c1b24
Merge pull request from numtide/ci
add support for environment variables
Jörg Thalheim 7fa8deb568 add support for environment variables
Jörg Thalheim 6daead50b1
Merge pull request from numtide/ci
vault-secrets: change action from none to restart
Jörg Thalheim cc1e801174 add test and fix systemd to reload secrets on reload
Jörg Thalheim bd069c7295 vault-secrets: change action from none to reload-or-restart
Jörg Thalheim f86721c4d4
Merge pull request from numtide/ci
Ci
Jörg Thalheim aa418152b3 add bors.toml
Jörg Thalheim ed9c3d275b accept non string values in secret map
Jörg Thalheim c1a11deabe
Merge pull request from numtide/ci
add vault.secrets options to systemd services
Jörg Thalheim 06495a406e add vault.secrets options to systemd services
Jörg Thalheim 4513408db4
Merge pull request from numtide/ci
update README
Jörg Thalheim 4659edf942 update README
Jörg Thalheim 493a8fb26d
Merge pull request from numtide/ci
systemd-vaultd: switch to use a json file for reading files
Jörg Thalheim 194336d1d0 systemd-vaultd: switch to use a json file for reading files
Jonas Chevalier bd1c3bccdc
Merge pull request from numtide/runCommand
replace runCommandNoCC by runCommand
zimbatm d409d508a5
replace runCommandNoCC by runCommand
runCommandNoCC has been replaced by runCommand in nixpkgs
Jörg Thalheim d99afdeafd
Merge pull request from numtide/permissions
allow processes to read from secrets directory
Jörg Thalheim 44746e793b allow processes to read from secrets directory
Jörg Thalheim b32efc23a7
Merge pull request from numtide/readme
README: refactor the text a bit
zimbatm b79d65923d
README: refactor the text a bit
Jörg Thalheim 1c901c071c
Merge pull request from numtide/executable-procfile
make the Procfile executable
zimbatm 2c19dcf811
make the Procfile executable
Because.. why not :)
Jörg Thalheim 0ab471db02
Merge pull request from numtide/add-license-1
Create LICENSE
Jonas Chevalier bf7efc0a9e
Create LICENSE
Jörg Thalheim e2d7197f61
Merge pull request from numtide/no-sudo
Procfile: avoid using sudo
Jörg Thalheim 6da13d433c nixos/systemd-vaultd: don't stop on nixos upgrades
Jörg Thalheim 7cd4acbc14 switch to nixpkgs fork
zimbatm 09aeac2ff1
Procfile: avoid using sudo
Aside from the running-as-root issue, it also means that the user has to
enter their password sometimes, and that doesn't work really well with
hivemind.
zimbatm 974032c41a
treefmt