update agenix shell pinning as a workaround for agenix las version not being properly push to nixpkgs

This commit is contained in:
asyncnomi 2025-07-31 16:42:42 +02:00
parent 4e6ca1355b
commit 6525887058
4 changed files with 40 additions and 1 deletions

View file

@ -26,4 +26,14 @@
./shared/dns.nix ./shared/dns.nix
]; ];
}; };
mail = {
hosts = [
"mail-mtz-lasuite-federez"
"mail-ren-lasuite-federez"
];
_inherit = [
./shared/mail.nix
];
};
} }

7
shared/mail.nix Normal file
View file

@ -0,0 +1,7 @@
{ ... }:
{
# Import dependencies
imports = [
./mail/maddy.nix
];
}

21
shared/mail/maddy.nix Normal file
View file

@ -0,0 +1,21 @@
{ config, lib, pkgs, ... }:
let
# Import nodes
nodes = import ./../../nodes.nix;
myName = config.hostName;
myNode = nodes."${myName}";
# And mapping
mapping = import ./../../mapping.nix;
in
{
age.secrets = {
"tsig" = {
file = ./../../secrets/mail/tsig.age;
owner = "knot";
group = "knot";
};
};
}

View file

@ -1,8 +1,9 @@
{ pkgs ? import <nixpkgs> {} }: { pkgs ? import <nixpkgs> {} }:
let let
agenixCommit = "531beac616433bac6f9e2a19feb8e99a22a66baf";
agenixSrc = fetchTarball { agenixSrc = fetchTarball {
url = "https://github.com/ryantm/agenix/archive/main.tar.gz"; url = "https://github.com/ryantm/agenix/archive/${agenixCommit}.tar.gz";
sha256 = "103slb8xy5sb68zxjjbb9d0svq8xz751a7yrg6vrz5rh4374bzgl"; sha256 = "103slb8xy5sb68zxjjbb9d0svq8xz751a7yrg6vrz5rh4374bzgl";
}; };
in in