20 lines
537 B
Nix
20 lines
537 B
Nix
|
{ exec, ... }: {
|
||
|
|
# I might get a somewhat better solution later, "enjoy" this for now
|
||
|
|
secrets = let
|
||
|
|
archive = exec [
|
||
|
|
"sh" "-c"
|
||
|
|
"echo '\"' && (cd /etc/nixos/private && tar czv . 2>/dev/null | base64 -w0) && echo '\"'"
|
||
|
|
];
|
||
|
|
in pkgs: import (pkgs.stdenvNoCC.mkDerivation {
|
||
|
|
name = "private";
|
||
|
|
unpackPhase = "true";
|
||
|
|
buildPhase = "true";
|
||
|
|
installPhase = ''
|
||
|
|
mkdir -p $out
|
||
|
|
cd $out
|
||
|
|
echo "${archive}" | base64 -d | tar xzv
|
||
|
|
'';
|
||
|
|
url = builtins.toFile "private.tar.gz" archive;
|
||
|
|
});
|
||
|
|
}
|