Add OCI credentials and deploy script for NixOracle

- Encrypt OCI API key and config with age (secrets/oci_key.age, oci_config.age)
- Auto-restore ~/.oci/ via home.activation on nixos-rebuild
- Add deploy-oracle.sh: creates boot volume snapshot (max 4) before deploying

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
ltadeu6 2026-05-28 18:46:59 -03:00
parent b75a3f4b29
commit d7436b2095
No known key found for this signature in database
GPG key ID: FB9FDAB6B6F3418D
6 changed files with 105 additions and 0 deletions

View file

@ -337,6 +337,22 @@ in {
(builtins.pathExists ../../secrets/minecraft_rcon_password.age) {
minecraft_rcon_password.file =
../../secrets/minecraft_rcon_password.age;
} // lib.optionalAttrs
(builtins.pathExists ../../secrets/oci_key.age) {
oci_key = {
file = ../../secrets/oci_key.age;
owner = username;
group = "users";
mode = "0400";
};
} // lib.optionalAttrs
(builtins.pathExists ../../secrets/oci_config.age) {
oci_config = {
file = ../../secrets/oci_config.age;
owner = username;
group = "users";
mode = "0400";
};
};
};