movefasta/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-06-24 18:16:21 +03:00
Code Activity

pumpio service: don't keep secrets in nix store

Browse source 
Added extra config options to allow reading passwords from file rather
than the world-readable nix store.

The full config.json file is created at service startup.

Relevant to #18881
This commit is contained in:
Rodney Lorrimar 2017-03-10 22:16:12 +00:00 • committed by Jörg Thalheim
parent f1a1490135
commit f488b1811b
No known key found for this signature in database
GPG key ID: CA4106B8D7CC79FA
2 changed files with 149 additions and 70 deletions
Download patch file Download diff file Expand all files Collapse all files

23
nixos/modules/services/web-apps/pump.io-configure.js Normal file
View file

@ -0,0 +1,23 @@
var fs = require('fs');
var opts = JSON.parse(fs.readFileSync("/dev/stdin").toString());
var config = opts.config;
var readSecret = function(filename) {
return fs.readFileSync(filename).toString().trim();
};
if (opts.secretFile) {
config.secret = readSecret(opts.secretFile);
}
if (opts.dbPasswordFile) {
config.params.dbpass = readSecret(opts.dbPasswordFile);
}
if (opts.smtpPasswordFile) {
config.smtppass = readSecret(opts.smtpPasswordFile);
}
if (opts.spamClientSecretFile) {
config.spamclientsecret = readSecret(opts.opts.spamClientSecretFile);
}
fs.writeFileSync(opts.outputFile, JSON.stringify(config));