Commit graph

6 commits

Author SHA1 Message Date
chayleaf f6b22a776e work around https://github.com/NixOS/hydra/issues/1186 2023-10-18 18:35:41 +07:00
chayleaf 04f3546f6e server: add swap 2023-10-17 23:12:08 +07:00
chayleaf 18d471c2ec nixserver->server; start working on phone config 2023-10-17 20:25:03 +07:00
chayleaf 5fed5f56c5 update inputs 2023-08-16 00:59:50 +07:00
chayleaf 1f0800986e don't put private files to store by default 2023-05-26 01:38:17 +07:00
chayleaf 69ce2ffdbc store secrets separate from this flake
This uses a native plugin (pkgs.nix-plugins) to avoid using --impure,
other options involving secret files are too limited for my use case as
I need eval-time access to secrets. Moving it to a private flake is
another option, but Nix flakes are poorly suited for non-monorepos.
Previously I just renamed .git to .git.bak to make sure Nix pulls the
"private" subdir into store as well, but this new system may be more
robust and can be extended to way be more secure in the future (e.g.
right now I copy the secret .nix files to store, but in general there's
no need to do that).

Of course the main drawback is that now I require a plugin for this
flake to work.
2023-05-26 00:46:38 +07:00