gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nixos/radicle-ci-broker: load private key from radicle-node service (#502978)

Browse Source
This commit is contained in:
Felix Bargfeldt
2026-03-24 10:59:59 +00:00
committed by GitHub
parent 9f81090366 a76fb62b56
commit d2d2c6c0b6
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nixos/modules/services/continuous-integration/radicle/ci-broker.nix
+6 -1
View File
@@ -204,7 +204,12 @@ in
RuntimeDirectory = "radicle-ci-broker";
WorkingDirectory = "/run/radicle-ci-broker";
BindReadOnlyPaths = config.systemd.services.radicle-node.serviceConfig.BindReadOnlyPaths;
ImportCredential = config.systemd.services.radicle-node.serviceConfig.ImportCredential or [ ];
LoadCredential = config.systemd.services.radicle-node.serviceConfig.LoadCredential or [ ];
BindReadOnlyPaths = config.systemd.services.radicle-node.serviceConfig.BindReadOnlyPaths ++ [
"/run/credentials/radicle-ci-broker.service/xyz.radicle.node.secret:/var/lib/radicle/keys/radicle"
];
ReadWritePaths = [ RAD_HOME ];
ExecStart = "${lib.getExe' cfg.package "cib"} --config ${configFile} process-events";