gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nixos/pocket-id: add warnings for all currently known secrets

Browse Source
This commit is contained in:
Gutyina Gergő
2026-01-08 12:30:27 +01:00
parent e2effbddbd
commit eff07668ad
1 changed files with 34 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nixos/modules/services/security/pocket-id.nix
+34 -22
View File
@@ -144,28 +144,40 @@ in
config = mkIf cfg.enable {
warnings =
optional (cfg.settings ? MAXMIND_LICENSE_KEY)
"`services.pocket-id.settings.MAXMIND_LICENSE_KEY` will be stored as plaintext in the Nix store. Use `services.pocket-id.credentials.MAXMIND_LICENSE_KEY` or `services.pocket-id.environmentFile` instead."
++
concatMap
(
# Added 2025-05-27
setting:
optional (cfg.settings ? "${setting}") ''
`services.pocket-id.settings.${setting}` is deprecated.
See [v1 migration guide](https://pocket-id.org/docs/setup/major-releases/migrate-v1).
''
)
[
"PUBLIC_APP_URL"
"PUBLIC_UI_CONFIG_DISABLED"
"CADDY_DISABLED"
"CADDY_PORT"
"BACKEND_PORT"
"POSTGRES_CONNECTION_STRING"
"SQLITE_DB_PATH"
"INTERNAL_BACKEND_URL"
];
(concatMap
(
setting:
optional (cfg.settings ? "${setting}") ''
`services.pocket-id.settings.${setting}` will be stored as plaintext in the Nix store. Use `services.pocket-id.credentials.${setting}` or `services.pocket-id.environmentFile` instead.
''
)
[
"ENCRYPTION_KEY"
"MAXMIND_LICENSE_KEY"
"SMTP_PASSWORD"
"LDAP_BIND_PASSWORD"
]
)
++ (concatMap
(
# Added 2025-05-27
setting:
optional (cfg.settings ? "${setting}") ''
`services.pocket-id.settings.${setting}` is deprecated.
See [v1 migration guide](https://pocket-id.org/docs/setup/major-releases/migrate-v1).
''
)
[
"PUBLIC_APP_URL"
"PUBLIC_UI_CONFIG_DISABLED"
"CADDY_DISABLED"
"CADDY_PORT"
"BACKEND_PORT"
"POSTGRES_CONNECTION_STRING"
"SQLITE_DB_PATH"
"INTERNAL_BACKEND_URL"
]
);
systemd.tmpfiles.rules = [
"d ${cfg.dataDir} 0755 ${cfg.user} ${cfg.group}"