ldap: do not write password to the Nix store

2023-05-20 00:12:02 +02:00
parent 33554e57ce
commit fb3210b932
5 changed files with 114 additions and 61 deletions
--- a/default.nix
+++ b/default.nix
@@ -240,11 +240,11 @@ in
          '';
        };

-        password = mkOption {
+        passwordFile = mkOption {
          type = types.str;
-          example = "not$4f3";
+          example = "/run/my-secret";
          description = ''
-            Password required to authenticate against the LDAP servers.
+            A file containing the password required to authenticate against the LDAP servers.
          '';
        };
      };