From 0d5b9ed74d9efbb11cda074b2e690c9e6dac8272 Mon Sep 17 00:00:00 2001
From: sinanmohd <sinan@sinanmohd.com>
Date: Sat, 21 Jun 2025 09:37:21 +0530
Subject: kay/minio: init

---
 os/kay/modules/minio.nix | 36 ++++++++++++++++++++++++++++++++++++
 1 file changed, 36 insertions(+)
 create mode 100644 os/kay/modules/minio.nix

(limited to 'os/kay/modules/minio.nix')

diff --git a/os/kay/modules/minio.nix b/os/kay/modules/minio.nix
new file mode 100644
index 0000000..d440e50
--- /dev/null
+++ b/os/kay/modules/minio.nix
@@ -0,0 +1,36 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+let
+  email = config.global.userdata.email;
+in
+{
+  sops.secrets."misc/default_password" = { };
+  systemd.services.minio.serviceConfig.LoadCredential = [
+    "password:${config.sops.secrets."misc/default_password".path}"
+  ];
+
+  services.minio = {
+    enable = true;
+    consoleAddress = ":9003";
+
+    package = pkgs.stdenv.mkDerivation {
+      name = "minio-with-secrets";
+      dontUnpack = true;
+      buildInputs = with pkgs; [
+        makeWrapper
+        minio
+      ];
+      installPhase = ''
+        mkdir -p $out/bin
+        makeWrapper ${lib.getExe pkgs.minio} $out/bin/minio \
+          --run 'echo "Seting Minio Secrets"' \
+          --set MINIO_ROOT_USER ${email} \
+          --run 'export MINIO_ROOT_PASSWORD="$(cat "$CREDENTIALS_DIRECTORY"/password)"'
+      '';
+    };
+  };
+}
-- 
cgit v1.2.3