set storage mode for rekey

This commit is contained in:
♥ Minnie ♥ 2024-04-01 10:00:19 +08:00
parent 82c24bf6a9
commit 1b60568c2c

View file

@ -19,6 +19,8 @@ in
rekey.hostPubkey = ../../${hostname}/ssh_host_ed25519_key.pub; rekey.hostPubkey = ../../${hostname}/ssh_host_ed25519_key.pub;
# Where we store the rekeyed secrets # Where we store the rekeyed secrets
rekey.cacheDir = "/var/tmp/agenix-rekey/\"$UID\""; rekey.cacheDir = "/var/tmp/agenix-rekey/\"$UID\"";
# All rekeyed secrets for each host will be collected in a derivation which copies them to the nix store when it is built
rekey.storageMode = "derivation";
}; };
# Required to persist `/var/tmp/agenix-rekey` # Required to persist `/var/tmp/agenix-rekey`
environment.persistence."/persist".directories = [ environment.persistence."/persist".directories = [