lukegb/depot
1
0
Fork 0
Code Issues 1 Pull requests Projects Packages Activity Actions

nixos/secretsmgr: add the timer unit

Browse source
This commit is contained in:
Luke Granger-Brown 2022-03-18 01:03:55 +00:00
parent b719181dfe
commit ce698ab382
1 changed files with 10 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
ops/nixos/lib/secretsmgr.nix
View file

@ -120,6 +120,16 @@ in
}; };
}; };
systemd.timers.secretsmgr = {
requires = ["vault-agent.service"];
after = ["vault-agent.service" "network-online.target"];
timerConfig = {
OnActiveSec = "30";
OnUnitInactiveSec = "30min";
};
};
systemd.tmpfiles.rules = [ systemd.tmpfiles.rules = [
"d /var/lib/acme 0711 secretsmgr secretsmgr - -" "d /var/lib/acme 0711 secretsmgr secretsmgr - -"
"d /var/lib/secretsmgr 0711 secretsmgr secretsmgr - -" "d /var/lib/secretsmgr 0711 secretsmgr secretsmgr - -"