This repository has no description
configs.ubik-host: migrate facts to vars
author
lassulus
date
(Aug 9, 2025, 2:46 PM CEST)
commit
e7dc2192
e7dc2192b6dcd556575051b07efc579b73f7f661
parent
ed1efb6d
ed1efb6ddafc3c0e4a4671298e8815386e79a1e1
+10
-6
+10
-6
2configs/ubik-host.nix
+10
-6
2configs/ubik-host.nix
···
1
1
{ config, pkgs, ... }:
2
2
{
3
3
krebs.sync-containers3.containers.ubik = {
4
-
sshKey = "${config.krebs.secret.directory}/ubik.sync.key";
4
+
sshKey = config.clan.core.vars.generators.ubik-container.files."ubik.sync.key".path;
5
5
startCommand = ''
6
6
export PATH=$PATH:${pkgs.git}/bin
7
7
until ${pkgs.dig.host}/bin/host github.com; do sleep 1; done
8
8
${pkgs.nixos-rebuild}/bin/nixos-rebuild --refresh --flake github:lassulus/superconfig#ubik switch --no-write-lock-file
9
9
'';
10
10
};
11
-
clan.core.facts.services.ubik-container = {
12
-
secret."ubik.sync.key" = { };
13
-
generator.script = ":";
14
-
generator.prompt = ''
15
-
copy or reference the secret key from the container into here, so we can actually start/sync the container
11
+
clan.core.vars.generators.ubik-container = {
12
+
files."ubik.sync.key" = { };
13
+
migrateFact = "ubik-container";
14
+
prompts.key = {
15
+
description = "copy or reference the secret key from the container into here, so we can actually start/sync the container";
16
+
type = "hidden";
17
+
};
18
+
script = ''
19
+
cp "$prompts"/key "$out"/ubik.sync.key
16
20
'';
17
21
};
18
22
containers.ubik.bindMounts."/var/lib" = {