set storage mode for rekey
This commit is contained in:
parent
82c24bf6a9
commit
1b60568c2c
|
@ -19,6 +19,8 @@ in
|
||||||
rekey.hostPubkey = ../../${hostname}/ssh_host_ed25519_key.pub;
|
rekey.hostPubkey = ../../${hostname}/ssh_host_ed25519_key.pub;
|
||||||
# Where we store the rekeyed secrets
|
# Where we store the rekeyed secrets
|
||||||
rekey.cacheDir = "/var/tmp/agenix-rekey/\"$UID\"";
|
rekey.cacheDir = "/var/tmp/agenix-rekey/\"$UID\"";
|
||||||
|
# All rekeyed secrets for each host will be collected in a derivation which copies them to the nix store when it is built
|
||||||
|
rekey.storageMode = "derivation";
|
||||||
};
|
};
|
||||||
# Required to persist `/var/tmp/agenix-rekey`
|
# Required to persist `/var/tmp/agenix-rekey`
|
||||||
environment.persistence."/persist".directories = [
|
environment.persistence."/persist".directories = [
|
||||||
|
|
Loading…
Reference in a new issue