liminix

commit daede666cb323678f5e5abd5a1656703465a974e
parent 2992771c7e4a875683bbb327a090c221ae75f29e
Author: Daniel Barlow <dan@telent.net>
Date:   Wed, 21 Aug 2024 00:17:53 +0100

in router-with-l2tp use secrets for ppp username/password

Diffstat:
M
examples/router-with-l2tp.nix
 | 
7
++++---

1 file changed, 4 insertions(+), 3 deletions(-)
diff --git a/examples/router-with-l2tp.nix b/examples/router-with-l2tp.nix
@@ -66,7 +66,7 @@ in rec {
 
   services.secrets = svc.secrets.outboard.build {
     name = "secret-service";
-    url = "http://10.0.0.1/liminix/examples/secrets.json";
+    url = "http://10.0.0.1/liminix/examples/real-secrets.json";
     interval = 5;
     dependencies = [ services.wan-address-for-secrets ];
   };
@@ -101,11 +101,12 @@ in rec {
     };
     wan = {
       interface = let
+        secret = path: { service = config.services.secrets; inherit path; };
         pppoe = svc.pppoe.build {
           interface = config.hardware.networkInterfaces.wan;
           debug = true;
-          username = rsecrets.l2tp.name;
-          password = rsecrets.l2tp.password;
+          username = secret "ppp/username";
+          password = secret "ppp/password";
         };
 
         l2tp =