Re: [Nix-dev] Provide options for storing secrets outside the Nix store

[Tomasz Czyż]

Great job Bas. We already started going into that direction with some new
pull requests. nlewo implemented that for new openstack modules for
example.

I think your proposal is very good. Should that go to our new shiny RFC?

2017-03-24 22:52 GMT+00:00 Bas van Dijk :

> Dear module authors, maintainers and contributors,
>
> I would like to bring your attention to:
>
>   https://github.com/NixOS/nixpkgs/issues/24288
>
> The idea is to add a `passwordFile` option for every `password` option so
> that users have a choice other than storing secrets inside the
> world-readable Nix store.
>
> What do you think about the proposal?
>
> If you agree and want to contribute, please mention in the issue which
> module you want to take on. That way we can coordinate the effort.
>
> Happy hacking,
>
> Bas
>
> ___
> nix-dev mailing list
> nix-dev@lists.science.uu.nl
> http://lists.science.uu.nl/mailman/listinfo/nix-dev
>
>


-- 
Tomasz Czyż
___
nix-dev mailing list
nix-dev@lists.science.uu.nl
http://lists.science.uu.nl/mailman/listinfo/nix-dev

[Nix-dev] Provide options for storing secrets outside the Nix store

[Bas van Dijk]

Dear module authors, maintainers and contributors,

I would like to bring your attention to:

  https://github.com/NixOS/nixpkgs/issues/24288

The idea is to add a `passwordFile` option for every `password` option so
that users have a choice other than storing secrets inside the
world-readable Nix store.

What do you think about the proposal?

If you agree and want to contribute, please mention in the issue which
module you want to take on. That way we can coordinate the effort.

Happy hacking,

Bas
___
nix-dev mailing list
nix-dev@lists.science.uu.nl
http://lists.science.uu.nl/mailman/listinfo/nix-dev