This repository has no description
configs.wiregrill: migrate facts to vars
author
lassulus
date
(Aug 9, 2025, 2:47 PM CEST)
commit
181a1636
181a16363f3234c0f3cac2fd28b7f65869ca10e3
parent
e7dc2192
e7dc2192b6dcd556575051b07efc579b73f7f661
+9
-8
+9
-8
2configs/wiregrill.nix
+9
-8
2configs/wiregrill.nix
···
49
49
}
50
50
]);
51
51
52
-
clan.core.facts.services.wiregrill = {
53
-
secret."wiregrill.key" = { };
54
-
public."wiregrill.pub" = { };
55
-
generator.path = with pkgs; [
52
+
clan.core.vars.generators.wiregrill = {
53
+
files."wiregrill.key" = { };
54
+
files."wiregrill.pub" = { };
55
+
migrateFact = "wiregrill";
56
+
runtimeInputs = with pkgs; [
56
57
coreutils
57
58
wireguard-tools
58
59
];
59
-
generator.script = ''
60
-
wg genkey > "$secrets"/wiregrill.key
61
-
cat "$secrets"/wiregrill.key | wg pubkey > "$facts"/wiregrill.pub
60
+
script = ''
61
+
wg genkey > "$out"/wiregrill.key
62
+
cat "$out"/wiregrill.key | wg pubkey > "$out"/wiregrill.pub
62
63
'';
63
64
};
64
65
···
77
78
(optional (!isNull self.ip4 && !config.systemd.network.enable) self.ip4.addr)
78
79
++ (optional (!isNull self.ip6 && !config.systemd.network.enable) self.ip6.addr);
79
80
listenPort = 51820;
80
-
privateKeyFile = "${config.krebs.secret.directory}/wiregrill.key";
81
+
privateKeyFile = config.clan.core.vars.generators.wiregrill.files."wiregrill.key".path;
81
82
allowedIPsAsRoutes = true;
82
83
peers = mapAttrsToList (_name: host: {
83
84
# inherit name;