Rodrigo Arias Mallo
2bb366b9ac
The agenix tools needs to read the secrets from a standalone file, but we also need the same information for the SSH keys.
25 lines
548 B
Nix
25 lines
548 B
Nix
{ config, pkgs, ... }:
|
|
|
|
{
|
|
environment.systemPackages = with pkgs; [
|
|
ceph
|
|
ceph-client
|
|
fio # For benchmarks
|
|
];
|
|
|
|
# We need the ceph module loaded as the mount.ceph binary fails to run the
|
|
# modprobe command.
|
|
boot.kernelModules = [ "ceph" ];
|
|
|
|
age.secrets.cephUser.file = ../../secrets/ceph-user.age;
|
|
|
|
fileSystems."/ceph" = {
|
|
fsType = "ceph";
|
|
device = "user@9c8d06e0-485f-4aaf-b16b-06d6daf1232b.cephfs=/";
|
|
options = [
|
|
"mon_addr=10.0.40.40"
|
|
"secretfile=${config.age.secrets.cephUser.path}"
|
|
];
|
|
};
|
|
}
|