Move secrets module outside of nixops

[perso/Immae/Config/Nix.git] / nixops / modules / databases / mysql.nix

diff --git a/nixops/modules/databases/mysql.nix b/nixops/modules/databases/mysql.nix
index a9ca8d326d1db8df00d21419c2586cdb7569af59..23b8b909b66ead7be53895b5a01765bc4f9b5903 100644 (file)
--- a/nixops/modules/databases/mysql.nix
+++ b/nixops/modules/databases/mysql.nix
@@ -14,14 +14,6 @@ in {
   };
 
   config = lib.mkIf cfg.enable {
-    nixpkgs.overlays = [ (self: super: rec {
-      mariadb = mariadbPAM;
-      mariadbPAM = super.mariadb.overrideAttrs(old: rec {
-        cmakeFlags = old.cmakeFlags ++ [ "-DWITH_AUTHENTICATION_PAM=ON" ];
-        buildInputs = old.buildInputs ++ [ self.pam ];
-      });
-    }) ];
-
     networking.firewall.allowedTCPPorts = [ 3306 ];
 
     # for adminer, ssl is implemented with mysqli only, which is
@@ -52,7 +44,7 @@ in {
       '';
     };
 
-    mySecrets.keys = [
+    secrets.keys = [
       {
         dest = "mysql/mysqldump";
         permissions = "0400";