homeage

homeage copied to clipboard

MacOS support

1

Unfortunately, the change in #4 prevented users on MacOS from using this tool on those machines going forward, as we do not have access to systemd or a useful-parity replacement,...

shanesveller

Error on system startup when home-manager used as NixOS module

3

Hey, I set up my NixOS system with home-manager as NixOS module. Therefore, the activation script will run inside a systemd service that also runs on system boot. During that...

Gerschtli

Use same option names as agenix

2

For consistency I think it would be better to use the same name as agenix (even though I find `source` a little clearer than `file`)

Sohalt

Implement activation checks: - [x] Each secret can be decrypted - [ ] No existing file conflicts

jordanisaacs

Allow for choosing between startup and activation decrypted secrets. Goes along with tmpfs/ramfs mounted secrets vs disk mounted secrets.

jordanisaacs

Should perform checks so it fails before applying if anything is wrong. Checks to perform: - [x] [Assertion] Duplicated paths in home-manager declaration - [x] [Assertion] Set `activationMount`/`startupMount` if needed....

jordanisaacs

Implement cleanup on generation change

5

# homeageCleanup Overview ## Goal Cleanup state of copies and symlinks on home manager changes (updates and rollbacks). Only way to have a non-cleaned up system is if you remove...

jordanisaacs

Activation script reintroduction (support non-systemd systems)

1

Add option to use script instead of systemd for startup secret decryption. Waiting on v0.1 stabilization of option set and writing checks/cleanup.

jordanisaacs

Add support for activation script again

3

This would be a global flag. Not sure if there would be use cases where this setting would be needed on a per file level, so I skipped that for...

Gerschtli

Cleanup old symlinks and secrets (and enable copying)

1

### Issue Currently all symbolic links that point to the `/run` secrets folder do not get cleaned up. Also decrypted secrets in `/run` are not deleted. Need a cleanup solution...

jordanisaacs