Fix agenix secret streaming for NSC configs

2026-03-19 00:43:31 -07:00 · 2026-03-19 00:43:31 -07:00 · ef3585bb14
commit ef3585bb14
parent 52b7f102f0
4 changed files with 2 additions and 6 deletions
--- a/Scripts/_burrow-secrets.sh
+++ b/Scripts/_burrow-secrets.sh
@ -117,12 +117,8 @@ burrow_encrypt_secret_from_file() {
  identity_path="$(burrow_agenix_identity_path "${repo_root}")"

  if [[ -n "${identity_path}" ]]; then
-    SECRET_SOURCE_FILE="${source_path}" \
-      EDITOR="${repo_root}/Scripts/agenix-load-file.sh" \
-      nix --extra-experimental-features "nix-command flakes" run "${repo_root}#agenix" -- -e "${agenix_path}" -i "${identity_path}"
+    nix --extra-experimental-features "nix-command flakes" run "${repo_root}#agenix" -- -e "${agenix_path}" -i "${identity_path}" < "${source_path}"
  else
-    SECRET_SOURCE_FILE="${source_path}" \
-      EDITOR="${repo_root}/Scripts/agenix-load-file.sh" \
-      nix --extra-experimental-features "nix-command flakes" run "${repo_root}#agenix" -- -e "${agenix_path}"
+    nix --extra-experimental-features "nix-command flakes" run "${repo_root}#agenix" -- -e "${agenix_path}" < "${source_path}"
  fi
 }
--- a/secrets/forgejo/nsc-autoscaler-config.age
+++ b/secrets/forgejo/nsc-autoscaler-config.age
--- a/secrets/forgejo/nsc-dispatcher-config.age
+++ b/secrets/forgejo/nsc-dispatcher-config.age
--- a/secrets/forgejo/nsc-token.age
+++ b/secrets/forgejo/nsc-token.age