-
-
Notifications
You must be signed in to change notification settings - Fork 0
Open
Labels
bugSomething isn't workingSomething isn't working
Description
HerculesCI on cetus does not find airone01 cache
Cache not found airone01
This is probably because the configuration of this snippet
Lines 27 to 32 in 77ee8ab
| "hercules-ci-agent-binary-caches.json" = { | |
| content = config.sops.placeholder."binaryCaches"; | |
| owner = config.users.users.hercules-ci-agent.name; | |
| group = config.users.users.hercules-ci-agent.group; | |
| mode = "0400"; | |
| }; |
Here some custom JSON should probably be used instead for clarity instead of putting the whole JSON file in a secret.
From https://github.com/Mic92/sops-nix?tab=readme-ov-file#templates:
Create a template for your configuration file and utilize the placeholder where you'd like the secret to be inserted. During the activation phase, sops-nix will substitute the placeholder with the actual secret content.
{ sops.templates."your-config-with-secrets.toml".content = '' password = "${config.sops.placeholder.your-secret}" ''; }
Metadata
Metadata
Assignees
Labels
bugSomething isn't workingSomething isn't working