Add encrypted munge key with agenix

2023-09-08 19:01:57 +02:00
parent e3e6e7662d
commit 2a0254b684
3 changed files with 15 additions and 3 deletions
--- a/m/common/slurm.nix
+++ b/m/common/slurm.nix
@@ -1,4 +1,4 @@
-{ pkgs, lib, ... }:
+{ config, pkgs, lib, ... }:

 let
  suspendProgram = pkgs.writeScript "suspend.sh" ''
@@ -85,4 +85,15 @@ in {
      SrunPortRange=60000-61000
    '';
  };
+
+  age.secrets.mungeKey = {
+    file = ../../secrets/munge-key.age;
+    owner = "munge";
+    group = "munge";
+  };
+
+  services.munge = {
+    enable = true;
+    password = config.age.secrets.mungeKey.path;
+  };
 }