gsadmin/headplane
1
0
Fork 0
mirror of https://github.com/tale/headplane.git synced 2026-09-01 01:38:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

Remove inlined secrets options

Browse Source 
Leaving only `_path` variants.
This commit is contained in:
Igor Ramazanov
2025-05-20 19:33:00 +00:00
committed by Aarnav Tale
parent 7f952bcb3b
commit 943e5d2a15
1 changed files with 0 additions and 61 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nix/module.nix
-61
View File
@@ -61,17 +61,6 @@ in {
description = "The port to listen on."; description = "The port to listen on.";
}; };
cookie_secret = lib.mkOption {
type = lib.types.nullOr lib.types.str;
default = null;
description = ''
The secret used to encode and decode web sessions.
Ensure that this is exactly 32 characters long.
Can be either a direct string or a path to a file containing the secret.
'';
example = "config.sops.secrets.headplane.path";
};
cookie_secret_path = lib.mkOption { cookie_secret_path = lib.mkOption {
type = lib.types.nullOr lib.types.path; type = lib.types.nullOr lib.types.path;
default = null; default = null;
@@ -96,16 +85,6 @@ in {
agent = lib.mkOption { agent = lib.mkOption {
type = lib.types.submodule { type = lib.types.submodule {
options = { options = {
authkey = lib.mkOption {
type = lib.types.nullOr lib.types.str;
default = null;
description = ''
The auth key used to authenticate the agent with Headplane.
Can be either a direct string or a path to a file containing the key.
'';
example = "config.sops.secrets.agent_authkey.path";
};
authkey_path = lib.mkOption { authkey_path = lib.mkOption {
type = lib.types.nullOr lib.types.path; type = lib.types.nullOr lib.types.path;
default = null; default = null;
@@ -153,16 +132,6 @@ in {
example = "https://headscale.example.com"; example = "https://headscale.example.com";
}; };
tls_cert = lib.mkOption {
type = lib.types.nullOr lib.types.str;
default = null;
description = ''
TLS certificate for HTTPS connections.
Can be either a direct string or a path to a file containing the certificate.
'';
example = "config.sops.secrets.tls_cert.path";
};
tls_cert_path = lib.mkOption { tls_cert_path = lib.mkOption {
type = lib.types.nullOr lib.types.path; type = lib.types.nullOr lib.types.path;
default = null; default = null;
@@ -173,16 +142,6 @@ in {
example = "config.sops.secrets.tls_cert.path"; example = "config.sops.secrets.tls_cert.path";
}; };
tls_key = lib.mkOption {
type = lib.types.nullOr lib.types.str;
default = null;
description = ''
TLS private key for HTTPS connections.
Can be either a direct string or a path to a file containing the key.
'';
example = "config.sops.secrets.tls_key.path";
};
tls_key_path = lib.mkOption { tls_key_path = lib.mkOption {
type = lib.types.nullOr lib.types.path; type = lib.types.nullOr lib.types.path;
default = null; default = null;
@@ -264,15 +223,6 @@ in {
example = "your-client-id"; example = "your-client-id";
}; };
client_secret = lib.mkOption {
type = lib.types.nullOr lib.types.str;
default = null;
description = ''
The client secret for the OIDC client.
'';
example = "config.sops.secrets.oidc_secret.path";
};
client_secret_path = lib.mkOption { client_secret_path = lib.mkOption {
type = lib.types.nullOr lib.types.path; type = lib.types.nullOr lib.types.path;
default = null; default = null;
@@ -298,17 +248,6 @@ in {
description = "The token endpoint authentication method."; description = "The token endpoint authentication method.";
}; };
headscale_api_key = lib.mkOption {
type = lib.types.nullOr lib.types.str;
default = null;
description = ''
If you are using OIDC, you need to generate an API key
that can be used to authenticate other sessions when signing in.
This can be done with `headscale apikeys create --expiration 999d`.
'';
example = "config.sops.secrets.headscale_api_key.path";
};
headscale_api_key_path = lib.mkOption { headscale_api_key_path = lib.mkOption {
type = lib.types.nullOr lib.types.path; type = lib.types.nullOr lib.types.path;
default = null; default = null;