| TheCodedProf | bdc2345 | 2023-06-14 13:39:10 -0400 | [diff] [blame] | 1 | { lib, config, ... }: |
| Skyler Grey | fe1740c | 2023-10-21 01:24:18 +0000 | [diff] [blame] | 2 | let cfg = config.scalpel; |
| 3 | in { |
| Skyler Grey | a78aa67 | 2023-05-20 13:48:18 +0200 | [diff] [blame] | 4 | system.activationScripts.scalpelCreateStore.text = lib.mkForce '' |
| 5 | echo "[scalpel] Ensuring existance of ${cfg.secretsDir}" |
| 6 | mkdir -p ${cfg.secretsDir} |
| 7 | grep -q "${cfg.secretsDir} ramfs" /proc/mounts || mount -t ramfs none "${cfg.secretsDir}" -o nodev,nosuid,mode=0751 |
| 8 | |
| 9 | echo "[scalpel] Clearing old secrets from ${cfg.secretsDir}" |
| 10 | find '${cfg.secretsDir}' -wholename '${cfg.secretsDir}' -o -prune -exec rm -rf -- {} + |
| 11 | ''; |
| 12 | } |