From f5d98f9ea7acb863f527526cb837b5c66a345b63 Mon Sep 17 00:00:00 2001
From: David Morgan <djm_uk@protonmail.com>
Date: Fri, 30 Aug 2024 12:19:22 +0100
Subject: Use tee for redirection instead of su -c
---
nix-conf/machines/edrahil/network-configuration.nix | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
(limited to 'nix-conf/machines')
diff --git a/nix-conf/machines/edrahil/network-configuration.nix b/nix-conf/machines/edrahil/network-configuration.nix
index 7a1b0b0..5a7bc28 100644
--- a/nix-conf/machines/edrahil/network-configuration.nix
+++ b/nix-conf/machines/edrahil/network-configuration.nix
@@ -5,7 +5,7 @@
# Emulate nix-sops. Technically an anti-pattern, but IP addresses aren't real secrets, and this has to be embedded here,
# as we cannot set a file path to read it from.
# Populate/update with:
- # doas su -c "SOPS_AGE_KEY=$(doas ssh-to-age -private-key -i /etc/ssh/ssh_host_ed25519_key) `which sops` -d --extract '[\"ipv6_address\"]' secrets/edrahil.yaml > /root/.config/secrets/ipv6_address"
+ # SOPS_AGE_KEY=$(doas ssh-to-age -private-key -i /etc/ssh/ssh_host_ed25519_key) sops -d --extract '["ipv6_address"]' secrets/edrahil.yaml | doas tee /root/.config/secrets/ipv6_address
address = builtins.readFile "/root/.config/secrets/ipv6_address";
prefixLength = 64;
}];
--
cgit 1.4.1-2-gfad0