+3

.gitignore

reviewed

··· 1 1 + .* 2 2 + .nix-secret 3 3 + *.log

+1 -1

nix/secrets.nix

reviewed

··· 6 6 pkgs.runCommand (baseNameOf (toString path)) { 7 7 buildInputs = [ pkgs.openssl ]; 8 8 } '' 9 9 - openssl enc -d -aes-256-cbc -pbkdf2 -salt -base64 -in ${path} -out $out -kfile ${/usr/local/secret} 9 9 + openssl enc -d -aes-256-cbc -pbkdf2 -salt -base64 -in ${path} -out $out -kfile ${../.nix-secret} 10 10 ''; 11 11 12 12 readSecretFileContents = path :