gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nixos/pocket-id: clarify 'secrets' option

Browse Source 
It's not immediately obvious that this takes the keys without the `_KEY`
suffix, so better document it.
This commit is contained in:
Florian Klink
2026-06-22 15:48:12 +03:00
parent 7efc7e3bb2
commit 03495efb8b
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nixos/modules/services/security/pocket-id.nix
+5 -2
View File
@@ -70,10 +70,13 @@ in
ENCRYPTION_KEY = "/run/secrets/pocket-id/encryption-key";
};
description = ''
Environment variables which are loaded from the contents of the specified file paths.
Credentials which are loaded from the contents of the specified file paths.
This can be used to securely store tokens and secrets outside of the world-readable Nix store.
See [PocketID environment variables](https://pocket-id.org/docs/configuration/environment-variables).
See [PocketID environment variables](https://pocket-id.org/docs/configuration/environment-variables) (all with the `_FILE` suffix).
Accepts an attrset mapping from the variable name *without its `_FILE` suffix* to the path on disk.
Alternatively you can use `services.pocket-id.environmentFile` to define all the variables in a single file.
'';