os/kay/modules/minio.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36

{
  config,
  lib,
  pkgs,
  ...
}:
let
  email = config.global.userdata.email;
in
{
  sops.secrets."misc/default_password" = { };
  systemd.services.minio.serviceConfig.LoadCredential = [
    "password:${config.sops.secrets."misc/default_password".path}"
  ];

  services.minio = {
    enable = true;
    consoleAddress = ":9003";

    package = pkgs.stdenv.mkDerivation {
      name = "minio-with-secrets";
      dontUnpack = true;
      buildInputs = with pkgs; [
        makeWrapper
        minio
      ];
      installPhase = ''
        mkdir -p $out/bin
        makeWrapper ${lib.getExe pkgs.minio} $out/bin/minio \
          --run 'echo "Seting Minio Secrets"' \
          --set MINIO_ROOT_USER ${email} \
          --run 'export MINIO_ROOT_PASSWORD="$(cat "$CREDENTIALS_DIRECTORY"/password)"'
      '';
    };
  };
}