practicalswift
df89ceed39
Fix typos
2020-08-04 13:32:06 +00:00
Jonas Nick
9239268ab6
Merge #136 : Change the nix-bitcoin deployment from forking this repo to importing the module
...
b2e15c17b8c9fe5c55a271204b5c12e80aba15ec docs: Update to new deployment method (import instead of fork) (Jonas Nick)
5ed0284db99e6659b8be3065db44648d6660d57c Add fetch-release script (Jonas Nick)
c303cd47e4880dae59f8ada846f0c61f0931058f Add push-release.sh helper (Jonas Nick)
705d187a35b728e6091428be3fd07da576516e2a examples/shell.nix: don't run shellHook on subsequent nix-shells (Erik Arvstedt)
65039be65692fee706b03d9049dd08028dfecf11 docs: Remove duplicate instructions (Jonas Nick)
455c5664c9beefc3fc68491523481988801e9536 docs: Replace tabs with spaces (Jonas Nick)
8aa4714979d8296fae023bb21a4a9fc3b0ca3095 docs: Update NixOS version (Jonas Nick)
9df22a2764a550f0f9a94f759a091d1d8cdd1135 add deploy-qemu-vm.sh example (Erik Arvstedt)
548ced19943efd48d12bc4f52bf26b440c43a4f2 README: Add Example section (Jonas Nick)
44ccbb91d0a03211f4b6c1a0349db38a21c0ab09 Clean up development shell.nix (Jonas Nick)
abcee651d3c24213b5efddf7e1532a6eafa70600 add deploy-container.sh (Erik Arvstedt)
5dadea310cc0522c2bf6a6a7771c6889f0ad39e0 add deploy-nixops.sh (Erik Arvstedt)
0c74c365de8cb5df3b9f8433d5e9baecc8df1aac mention performance loss with hardened kernel profile (Erik Arvstedt)
f3121892ef22e269fd799ce38bd2a7aea3f1370e move main module import to configuration.nix (Erik Arvstedt)
0c0978c0073d18d195e8518ca4624592000fb8a9 extract module 'deployment/nixops.nix', add option 'deployment.secretsDir' (Erik Arvstedt)
87d0286498b7d7d9e85a2ac0fa3af650723ca196 Change the nix-bitcoin deployment from forking this repo to importing the module (Jonas Nick)
Pull request description:
Top commit has no ACKs.
Tree-SHA512: 18e8b71f42715c5e82e2dafde9dcc965594d76aacc6be7ee2ec746a9510065749cc65331687a57d7140f45779c3b7867f6260ec224d361fb5a477062a27d6e4c
2020-04-08 15:03:08 +00:00
Erik Arvstedt
b07c77f4a4
secrets.nix: remove obsolete comment
2020-03-29 18:51:34 +02:00
Erik Arvstedt
0c0978c007
extract module 'deployment/nixops.nix', add option 'deployment.secretsDir'
2020-03-24 21:43:21 +00:00
Erik Arvstedt
ad23b508e3
{generate,setup}-secrets: remove process hardening
...
ProtectSystem=full disables writing to /etc which is the default
secrets location.
Besides that, hardening is pointless for {generate,setup}-secrets which
don't read external input and are fully under our control.
2020-02-26 20:38:46 +01:00
Erik Arvstedt
89f9bedb9d
generate-secrets.nix: fix indentation
2020-02-26 20:38:46 +01:00
Erik Arvstedt
826245484e
make secrets dir location configurable
...
Users of the nix-bitcoin modules shouldn't be forced to add an extra
dir under root.
The secrets location is unchanged for the default node config.
2020-01-13 00:25:12 +01:00
Erik Arvstedt
b1e13e9415
simplify secrets file format
...
Each secret file to be deployed is now backed by one local file.
This simplifies 'setup-secrets' and the secret definitions.
Also, with the old format it was not possible to add new secrets
to secrets.nix in a simple way.
Old secrets are automatically converted to the new format when running
nix-shell.
Using the new option 'nix-bitcoin.secrets', secrets are now directly
defined by the services that use them.
2020-01-13 00:25:11 +01:00
Erik Arvstedt
b90bf6691b
add generate-secrets.service
2020-01-12 20:02:01 +01:00
Erik Arvstedt
e3b47ce18a
add setup-secrets.service
2020-01-12 20:02:01 +01:00
Erik Arvstedt
437b268433
extract make-secrets.nix
...
Needed by the next commit.
2020-01-12 20:02:00 +01:00
