From 38d1791fce609a9daeb4afb869f523efdda71e04 Mon Sep 17 00:00:00 2001 From: Yaroslav Bolyukin Date: Fri, 02 Sep 2022 19:59:18 +0000 Subject: [PATCH] refactor!: remove secret.path BREAKING CHANGE: all .path usages should be switched to .secretPath --- --- a/nixos/secrets.nix +++ b/nixos/secrets.nix @@ -6,7 +6,6 @@ sysConfig = config; secretType = types.submodule ({ config, ... }: { config = rec { - path = warn "use .stableSecretPath instead of .path (at config.secrets.${config._module.args.name})" stableSecretPath; stableSecretPath = mkOptionDefault "/run/secrets/secret-stable-${config._module.args.name}"; secretPath = mkOptionDefault "/run/secrets/secret-${config.secretHash}-${config._module.args.name}"; secretHash = mkOptionDefault (if config.secret != null then (builtins.hashString "sha1" config.secret) else ""); @@ -51,16 +50,12 @@ description = "Hash of .public field"; }; - path = mkOption { - type = types.str; - description = "Path to the decrypted secret"; - }; stableSecretPath = mkOption { type = types.str; - description = """ + description = '' Use this, if target process supports re-reading of secret from disk, and doesn't needs to be restarted when secret is updated in file - """; + ''; }; secretPath = mkOption { type = types.str; @@ -69,10 +64,10 @@ stablePublicPath = mkOption { type = types.str; - description = """ + description = '' Use this, if target process supports re-reading of secret from disk, and doesn't needs to be restarted when secret is updated in file - """; + ''; }; publicPath = mkOption { type = types.str; -- gitstuff