Enable docker secrets for backend configs.
Add a link to docker secrets from config/backend so that docker secrets
are available as configs and API keys can be stored in secure storage.
commit56efa1ac9e1a08ff86ceba19cdd9262c26bb9e49
authorJonathan D.K. Gibbons <jonored@gmail.com>
dateTue 5 Nov 2019, 09:28 (7 years ago)
parente91171a
default.nix+4
@@ -251,6 +251,10 @@ in rec {
251251 echo 'nobody:*:17416:0:99999:7:::' >> $out/etc/shadow
252252 echo 'nobody:x:99:' >> $out/etc/group
253253 echo 'nobody:::' >> $out/etc/gshadow
254+
255+ # Allow us to use docker secrets as backend config files more easily.
256+ mkdir -p $out/var/lib/backend/config
257+ ln -s /run/secrets $out/var/lib/backend/config/backend
254258 '';
255259
256260 in nixpkgs.dockerTools.buildImage {