pkg/sops-nix
1
0
Fork 0
mirror of https://github.com/Mic92/sops-nix.git synced 2025-12-26 22:24:59 +08:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
1099 commits 17 branches 1 tag 2.6 MiB
Commit graph

1099 commits

This branch
This branch
All branches
Author SHA1 Message Date
Ilise Leary
b1716865b3
Merge 88dd7997d9 into 9836912e37 2025-12-21 15:54:12 +01:00
github-actions[bot]
9836912e37
Merge pull request #878 from Mic92/create-pull-request/patch
Some checks failed
Test / tests (push) Has been cancelled
Details 
Update flakes
 2025-12-21 03:59:35 +00:00
Mic92
1a65e3368e [create-pull-request] automated change 2025-12-21 03:52:39 +00:00
github-actions[bot]
443a7f2e7e
Merge pull request #875 from Mic92/dependabot/github_actions/peter-evans/create-pull-request-8
Some checks failed
Test / tests (push) Has been cancelled
Details 
Bump peter-evans/create-pull-request from 7 to 8
 2025-12-15 22:02:53 +00:00
dependabot[bot]
e5eee58ef0
Bump peter-evans/create-pull-request from 7 to 8 
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 7 to 8.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](https://github.com/peter-evans/create-pull-request/compare/v7...v8)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-12-15 22:00:55 +00:00
NovaViper
88dd7997d9
feat: add age plugin and fido2 hmac support 
Co-authored-by: brianmcgee <brian@41north.dev>
 2025-12-13 22:56:53 -06:00
github-actions[bot]
94d8af61d8
Merge pull request #873 from Mic92/create-pull-request/patch
Some checks failed
Test / tests (push) Has been cancelled
Details 
Update flakes
 2025-12-14 04:00:37 +00:00
Mic92
a46c7caf5f [create-pull-request] automated change 2025-12-14 03:52:04 +00:00
Jörg Thalheim
496a6f625f
Merge pull request #866 from gumball76/master
Some checks failed
Test / tests (push) Has been cancelled
Details 
README: fix Home Manager Systemd unit configuration
 2025-12-12 16:27:06 +01:00
gumball76
207df45fb4 README: fix Home Manager Systemd unit configuration 
Since Home Manager relies on the naming scheme used by Systemd, the
current way to set a dependent service defined in the README fails as
Systemd doesn't support it.
 2025-12-12 16:23:57 +01:00
Jörg Thalheim
5745e46834
Merge pull request #871 from Ma27/fix-systemd-service-ordering 
modules/sops: re-run sops-install-secrets.service at sysinit-reactivation.target
 2025-12-12 16:23:38 +01:00
Maximilian Bosch
645fa1c3ef
modules/sops: re-run sops-install-secrets.service at sysinit-reactivation.target 
Consider the following case: a service (`gitlab-runner.service` in this case) gets
a new secret that is installed via sops and will be reloaded on a switch. Right
now this would fail like this:

    machine | updating GRUB 2 menu...
    machine | stopping the following units: sops-install-secrets.service
    machine | activating the configuration...
    machine | setting up /etc...
    [...]
    machine | restarting sysinit-reactivation.target
    machine | reloading the following units: dbus-broker.service, gitlab-runner.service
    machine | restarting the following units: polkit.service
    machine | starting the following units: sops-install-secrets.service

Here, the reload happens _before_ running `sops-install-secrets.service`
which means that the newly added secret doesn't exist yet and thus the
reload fails.

This change makes sure the service is started when running
`sysinit-reactivation.target`, i.e. before stc-ng reloads other
services. This is what sysusers already does, so the objective of
running after sysusers is still met.

Also, added an `After=userborn.service` to make sure it's also ordered
after userborn if necessary.

Thank you WilliButz for reminding me that `sysinit-reactivation.target`
exists and is most likely the culprit of that!
 2025-12-11 11:56:01 +01:00
github-actions[bot]
7fd1416aba
Merge pull request #870 from Mic92/dependabot/go_modules/golang.org/x/crypto-0.46.0
Some checks failed
Test / tests (push) Has been cancelled
Details 
Bump golang.org/x/crypto from 0.45.0 to 0.46.0
 2025-12-08 22:08:38 +00:00
dependabot[bot]
215ba65333 update vendorHash 2025-12-08 22:02:51 +00:00
dependabot[bot]
0c1d819913
Bump golang.org/x/crypto from 0.45.0 to 0.46.0 
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.45.0 to 0.46.0.
- [Commits](https://github.com/golang/crypto/compare/v0.45.0...v0.46.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-12-08 22:01:27 +00:00
github-actions[bot]
aeb5172621
Merge pull request #869 from Mic92/create-pull-request/patch
Some checks failed
Test / tests (push) Has been cancelled
Details 
Update flakes
 2025-12-07 03:57:10 +00:00
Mic92
5abc56e28c [create-pull-request] automated change 2025-12-07 03:49:27 +00:00
github-actions[bot]
5aca6ff672
Merge pull request #867 from Mic92/create-pull-request/patch
Some checks failed
Test / tests (push) Has been cancelled
Details 
Update flakes
 2025-11-30 06:15:58 +00:00
Mic92
5e729c1f22 [create-pull-request] automated change 2025-11-30 03:49:33 +00:00
github-actions[bot]
c482a1c1bb
Merge pull request #865 from Mic92/dependabot/github_actions/actions/checkout-6
Some checks failed
Test / tests (push) Has been cancelled
Details 
Bump actions/checkout from 5 to 6
 2025-11-24 22:06:03 +00:00
dependabot[bot]
5d99ef8f0b
Bump actions/checkout from 5 to 6 
Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-24 22:04:02 +00:00
github-actions[bot]
4e7d74d923
Merge pull request #863 from Mic92/create-pull-request/patch
Some checks failed
Test / tests (push) Has been cancelled
Details 
Update flakes
 2025-11-23 03:53:32 +00:00
Mic92
fc2dbd1ba5 [create-pull-request] automated change 2025-11-23 03:49:23 +00:00
github-actions[bot]
877bb495a6
Merge pull request #862 from Mic92/dependabot/go_modules/golang.org/x/crypto-0.45.0
Some checks failed
Test / tests (push) Has been cancelled
Details 
Bump golang.org/x/crypto from 0.44.0 to 0.45.0
 2025-11-20 03:05:16 +00:00
dependabot[bot]
3a26cd7f45 update vendorHash 2025-11-20 02:59:53 +00:00
dependabot[bot]
053a520422
Bump golang.org/x/crypto from 0.44.0 to 0.45.0 
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.44.0 to 0.45.0.
- [Commits](https://github.com/golang/crypto/compare/v0.44.0...v0.45.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.45.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-20 02:58:37 +00:00
Sandro
3ee33c0ed7
Merge pull request #861 from me-and/sops-ssh-to-age
Some checks are pending
Test / tests (push) Waiting to run
Details 
sops-ssh-to-age: remove broken ref in overlay
 2025-11-19 00:41:50 +01:00
Adam Dinwoodie
ee1132add7 sops-ssh-to-age: remove broken ref in overlay 
The overlay provided by the flake in this repository references
`sops-ssh-to-age`, but that hasn't existed since it was renamed in
6c916c1 (Add a converter from private ssh keys to age, 2021-08-28) then
removed in f636296 (Switch the libs to now external ones, 2021-09-01).
 2025-11-18 10:03:14 +00:00
github-actions[bot]
3f66a7fb96
Merge pull request #860 from Mic92/dependabot/go_modules/golang.org/x/crypto-0.44.0
Some checks are pending
Test / tests (push) Waiting to run
Details 
Bump golang.org/x/crypto from 0.43.0 to 0.44.0
 2025-11-17 22:09:08 +00:00
dependabot[bot]
a6515c5864 update vendorHash 2025-11-17 22:04:03 +00:00
dependabot[bot]
8d565a77b1
Bump golang.org/x/crypto from 0.43.0 to 0.44.0 
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.43.0 to 0.44.0.
- [Commits](https://github.com/golang/crypto/compare/v0.43.0...v0.44.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-17 22:02:55 +00:00
Jörg Thalheim
e3aa38151e
Merge pull request #858 from lschuermann/dev/systemd-activation-option 
modules/sops: allow forcing systemd-based activation (attempt #2)
 2025-11-17 19:43:07 +01:00
Leon Schuermann
b2cddb00f9 modules/sops: allow forcing systemd-based activation 
By allowing users to optionally force using systemd unit-based
activation, they can inject dependencies on other services or
mountpoints (for instance, when the age key is not stored on the root
file system).
 2025-11-16 17:48:32 -05:00
github-actions[bot]
882e56c829
Merge pull request #859 from Mic92/create-pull-request/patch
Some checks failed
Test / tests (push) Has been cancelled
Details 
Update flakes
 2025-11-16 03:46:03 +00:00
Mic92
cf1c368263 [create-pull-request] automated change 2025-11-16 03:41:27 +00:00
Jörg Thalheim
a2bcd1c25c Revert "modules/sops: allow forcing systemd-based activation"
Some checks failed
Test / tests (push) Has been cancelled
Details 
This reverts commit b80c966e70.

See https://github.com/Mic92/sops-nix/issues/856
 2025-11-13 22:35:29 +01:00
Leon Schuermann
b80c966e70 modules/sops: allow forcing systemd-based activation
Some checks are pending
Test / tests (push) Waiting to run
Details 
By allowing users to optionally force using systemd unit-based
activation, they can inject dependencies on other services or
mountpoints (for instance, when the age key is not stored on the root
file system).
 2025-11-13 09:41:12 +01:00
github-actions[bot]
d75e4f89e5
Merge pull request #853 from Mic92/dependabot/go_modules/golang.org/x/sys-0.38.0
Some checks failed
Test / tests (push) Has been cancelled
Details 
Bump golang.org/x/sys from 0.37.0 to 0.38.0
 2025-11-10 22:08:55 +00:00
dependabot[bot]
ae816fee6d update vendorHash 2025-11-10 22:03:43 +00:00
dependabot[bot]
dc5422025c
Bump golang.org/x/sys from 0.37.0 to 0.38.0 
Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.37.0 to 0.38.0.
- [Commits](https://github.com/golang/sys/compare/v0.37.0...v0.38.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-version: 0.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-10 22:02:30 +00:00
github-actions[bot]
524312bc62
Merge pull request #849 from Mic92/create-pull-request/patch
Some checks failed
Test / tests (push) Has been cancelled
Details 
Update flakes
 2025-11-09 03:43:28 +00:00
Mic92
47b07c0687 [create-pull-request] automated change 2025-11-09 03:36:28 +00:00
github-actions[bot]
5a7d18b5c5
Merge pull request #847 from Mic92/dependabot/go_modules/golang.org/x/crypto-0.43.0
Some checks failed
Test / tests (push) Has been cancelled
Details 
Bump golang.org/x/crypto from 0.42.0 to 0.43.0
 2025-10-20 22:09:49 +00:00
dependabot[bot]
73e0957139 update vendorHash 2025-10-20 22:03:55 +00:00
dependabot[bot]
b05d4a8bdf
Bump golang.org/x/crypto from 0.42.0 to 0.43.0 
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.42.0 to 0.43.0.
- [Commits](https://github.com/golang/crypto/compare/v0.42.0...v0.43.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-10-20 22:01:58 +00:00
github-actions[bot]
9c9a9798be
Merge pull request #846 from Mic92/create-pull-request/patch
Some checks failed
Test / tests (push) Has been cancelled
Details 
Update flakes
 2025-10-19 03:46:11 +00:00
Mic92
32a111b634 [create-pull-request] automated change 2025-10-19 03:37:59 +00:00
github-actions[bot]
ab8d56e85b
Merge pull request #845 from Mic92/dependabot/go_modules/golang.org/x/sys-0.37.0 
Bump golang.org/x/sys from 0.36.0 to 0.37.0
 2025-10-13 22:09:28 +00:00
dependabot[bot]
6729bf319f update vendorHash 2025-10-13 22:03:29 +00:00
dependabot[bot]
38fdedc418
Bump golang.org/x/sys from 0.36.0 to 0.37.0 
Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.36.0 to 0.37.0.
- [Commits](https://github.com/golang/sys/compare/v0.36.0...v0.37.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-10-13 22:02:08 +00:00