29 lines
618 B
Nix
29 lines
618 B
Nix
|
{ config, lib, pkgs, ... }:
|
||
|
|
|
||
|
|
{
|
||
|
|
krebs.secret.files.mysql_rootPassword = {
|
||
|
|
path = "${config.services.mysql.dataDir}/mysql_rootPassword";
|
||
|
|
owner.name = "root";
|
||
|
|
source-path = toString <secrets> + "/mysql_rootPassword";
|
||
|
|
};
|
||
|
|
|
||
|
|
services.mysql = {
|
||
|
|
enable = true;
|
||
|
|
package = pkgs.mariadb;
|
||
|
|
rootPassword = config.krebs.secret.files.mysql_rootPassword.path;
|
||
|
|
};
|
||
|
|
|
||
|
|
systemd.services.mysql = {
|
||
|
|
requires = [ "secret.service" ];
|
||
|
|
after = [ "secret.service" ];
|
||
|
|
};
|
||
|
|
|
||
|
|
lass.mysqlBackup = {
|
||
|
|
enable = true;
|
||
|
|
config.all = {
|
||
|
|
password = toString (<secrets/mysql_rootPassword>);
|
||
|
|
};
|
||
|
|
};
|
||
|
|
}
|
||
|
|
|