guix-epistemia

commit fb67ad6b0f708b95d6658c0f4b13b1cd1272901a
parent d730c554e80ac835072e16e99682a5b79e0b425f
Author: Vineet Kumar <git@vineetk.net>
Date:   Fri,  6 Feb 2026 18:28:20 -0500

demiurge: add wireguard-wg1 dependency on age-secret

Diffstat:
M
epistemia/services/age-secret.scm
 | 
13
++++++++++++-

1 file changed, 12 insertions(+), 1 deletion(-)
diff --git a/epistemia/services/age-secret.scm b/epistemia/services/age-secret.scm
@@ -2,6 +2,7 @@
   #:use-module (guix gexp)
   #:use-module (guix records)
   #:use-module (gnu services)
+  #:use-module (gnu services shepherd)
   #:use-module (gnu packages golang-crypto)
   #:use-module (ice-9 match)
   #:export (age-secret-service-type
@@ -75,12 +76,22 @@
                              (age-secret-mode s)))
                      secrets)))))))
 
+(define (age-secret-shepherd-service config)
+  (list (shepherd-service
+         (provision '(age-secret))
+         (requirement '())
+         (one-shot? #t)
+         (start #~(lambda () #t))
+         (documentation "Age secret decryption marker service."))))
+
 (define age-secret-service-type
   (service-type
     (name 'age-secret)
     (extensions
      (list (service-extension activation-service-type
-                              age-secret-activation)))
+                              age-secret-activation)
+           (service-extension shepherd-root-service-type
+                              age-secret-shepherd-service)))
     (description
      "Decrypts age-encrypted files at boot using host keys and assigns ownership.")
     (default-value (age-secret-configuration))))