lukegb/depot
1
0
Fork 0
Code Issues 1 Pull requests Projects Packages Activity Actions

ops/vault/cfg: where we're going, we don't need secrets.nix

Browse source
This commit is contained in:
Luke Granger-Brown 2022-03-16 00:06:46 +00:00
parent 165fc4559c
commit fb7e18260a
2 changed files with 5 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
ops/vault/cfg/authbackend-oidc.nix
View file

@ -7,7 +7,7 @@
oidc_discovery_url = "https://accounts.google.com";
oidc_client_id = "620300851636-6ha1a7t9r4gatrn9gdqa82toem3cbq3b.apps.googleusercontent.com";
# oidc_client_secret in secrets.nix
oidc_client_secret = "\${data.vault_generic_secret.misc.data[\"oidcAuthToken\"]}";
};
my.authBackend.oidc = {

6
ops/vault/cfg/config.nix
View file

@ -2,8 +2,6 @@
{
imports = [
./secrets.nix
./policies-raw.nix
./policies-app.nix
@ -32,6 +30,10 @@
address = "https://vault.int.lukegb.com";
};
data.vault_generic_secret.misc = {
path = "kv/misc-input";
};
my.apps.pomerium = {};
my.servers.etheroute-lon01.apps = [ "pomerium" ];
}