s0me1newithhand7s/reNixos
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

kyra(hardening): step-ca service secrets managment

Browse source 
Signed-off-by: s0me1newithhand7s <git+me@hand7s.org>
This commit is contained in:
s0me1newithhand7s 2026-05-03 16:03:09 +03:00
parent 8894fdb401
commit a04279affe
1 changed files with 13 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

13
kyra/systemd/step-ca-service.nix Normal file
View file

@ -0,0 +1,13 @@
{config, ...}: {
systemd = {
services = {
"step-ca" = {
serviceConfig = {
EnvironmentFile = [
config.sops.templates."step-ca.env".path
];
};
};
};
};
}