nixos/alloy: add environmentFile option
This is a common practice among other NixOS modules, and allows people to inject secrets via tools like `sops-nix` and similar.
This commit is contained in:
@@ -48,6 +48,15 @@ in
|
|||||||
'';
|
'';
|
||||||
};
|
};
|
||||||
|
|
||||||
|
environmentFile = lib.mkOption {
|
||||||
|
type = with lib.types; nullOr path;
|
||||||
|
default = null;
|
||||||
|
example = "/run/secrets/alloy.env";
|
||||||
|
description = ''
|
||||||
|
EnvironmentFile as defined in {manpage}`systemd.exec(5)`.
|
||||||
|
'';
|
||||||
|
};
|
||||||
|
|
||||||
extraFlags = lib.mkOption {
|
extraFlags = lib.mkOption {
|
||||||
type = with lib.types; listOf str;
|
type = with lib.types; listOf str;
|
||||||
default = [ ];
|
default = [ ];
|
||||||
@@ -84,6 +93,7 @@ in
|
|||||||
StateDirectory = "alloy";
|
StateDirectory = "alloy";
|
||||||
WorkingDirectory = "%S/alloy";
|
WorkingDirectory = "%S/alloy";
|
||||||
Type = "simple";
|
Type = "simple";
|
||||||
|
EnvironmentFile = lib.mkIf (cfg.environmentFile != null) [ cfg.environmentFile ];
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|||||||
Reference in New Issue
Block a user