Torjus Håkestad
c214f8543c
- Add homelab.deploy.enable option (requires vault.enable) - Create shared homelab-deploy Vault policy for all hosts - Enable homelab.deploy on all vault-enabled hosts Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
17 lines
382 B
Nix
17 lines
382 B
Nix
{ config, lib, ... }:
|
|
|
|
{
|
|
options.homelab.deploy = {
|
|
enable = lib.mkEnableOption "homelab-deploy listener for NATS-based deployments";
|
|
};
|
|
|
|
config = {
|
|
assertions = [
|
|
{
|
|
assertion = config.homelab.deploy.enable -> config.vault.enable;
|
|
message = "homelab.deploy.enable requires vault.enable to be true (needed for NKey secret)";
|
|
}
|
|
];
|
|
};
|
|
}
|