secrets: add hydra group to binary-cache-private-key where needed

This commit is contained in:
Infinidoge 2024-05-20 21:17:25 -04:00
parent 2b6241bbcd
commit 3a34bbdadc
Signed by: Infinidoge
SSH key fingerprint: SHA256:EMoPe5e2dO0gEvtBb2xkZTz5dkyL0rBmuiGTKG5s96E

View file

@ -26,11 +26,11 @@ in
inherit (secrets) inherit (secrets)
"infinidoge-password" "infinidoge-password"
"root-password" "root-password"
"binary-cache-private-key"
"borg-ssh-key" "borg-ssh-key"
; ;
"borg-password" = secrets."borg-password" // { group = "borg"; mode = "440";}; "borg-password" = secrets."borg-password" // { group = "borg"; mode = "440";};
"binary-cache-private-key" = secrets.binary-cache-private-key // lib.optionalAttrs config.services.hydra.enable { group = "hydra"; mode = "440"; };
} }
(mkIf config.services.nginx.enable { (mkIf config.services.nginx.enable {
inherit (secrets) "cloudflare"; inherit (secrets) "cloudflare";