sops: fix config for darwin
This commit is contained in:
parent
281ca7ed03
commit
76d79356c3
3 changed files with 36 additions and 9 deletions
|
|
@ -21,7 +21,6 @@ in
|
|||
sops = {
|
||||
secrets."nix/access-tokens" = {
|
||||
owner = "root";
|
||||
group = "users";
|
||||
mode = "0440";
|
||||
sopsFile = ./secrets.yaml;
|
||||
};
|
||||
|
|
@ -30,7 +29,8 @@ in
|
|||
access-tokens = ${config.sops.placeholder."nix/access-tokens"}
|
||||
'';
|
||||
owner = "root";
|
||||
group = "users";
|
||||
# secret needs to be readable by users (nix client) as well as nix-daemon (running as root)
|
||||
group = if pkgs.stdenv.isDarwin then "localaccounts" else "users";
|
||||
mode = "0440";
|
||||
};
|
||||
};
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue