depot/ops/vault/cfg/config.nix

37 lines
608 B
Nix

{ lib, config, ... }:
{
imports = [
./secrets.nix
./policies-raw.nix
./policies-app.nix
./authbackend-approle.nix
./authbackend-oidc.nix
./ssh-ca-client.nix
./ssh-ca-server.nix
./servers.nix
];
terraform = {
backend.gcs = {
bucket = "lukegb-terraform-state";
prefix = "depot/vault";
};
required_providers.vault = {
source = "hashicorp/vault";
version = "3.3.1";
};
};
provider.vault = {
address = "https://vault.int.lukegb.com";
};
my.apps.pomerium = {};
my.servers.etheroute-lon01.apps = [ "pomerium" ];
}