lukegb/depot
1
0
Fork 0
Code Issues 1 Pull requests Projects Packages Activity Actions

ops/vault/cfg: where we're going, we don't need secrets.nix

Browse source
This commit is contained in:
Luke Granger-Brown 2022-03-16 00:06:46 +00:00
parent 165fc4559c
commit fb7e18260a
2 changed files with 5 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
ops/vault/cfg/authbackend-oidc.nix
View file

@ -7,7 +7,7 @@
oidc_discovery_url = "https://accounts.google.com"; oidc_discovery_url = "https://accounts.google.com";
oidc_client_id = "620300851636-6ha1a7t9r4gatrn9gdqa82toem3cbq3b.apps.googleusercontent.com"; oidc_client_id = "620300851636-6ha1a7t9r4gatrn9gdqa82toem3cbq3b.apps.googleusercontent.com";
# oidc_client_secret in secrets.nix oidc_client_secret = "\${data.vault_generic_secret.misc.data[\"oidcAuthToken\"]}";
}; };
my.authBackend.oidc = { my.authBackend.oidc = {

6
ops/vault/cfg/config.nix
View file

@ -2,8 +2,6 @@
{ {
imports = [ imports = [
./secrets.nix
./policies-raw.nix ./policies-raw.nix
./policies-app.nix ./policies-app.nix
@ -32,6 +30,10 @@
address = "https://vault.int.lukegb.com"; address = "https://vault.int.lukegb.com";
}; };
data.vault_generic_secret.misc = {
path = "kv/misc-input";
};
my.apps.pomerium = {}; my.apps.pomerium = {};
my.servers.etheroute-lon01.apps = [ "pomerium" ]; my.servers.etheroute-lon01.apps = [ "pomerium" ];
} }