aboutsummaryrefslogtreecommitdiff
path: root/tw/home.scm
diff options
context:
space:
mode:
Diffstat (limited to 'tw/home.scm')
-rw-r--r--tw/home.scm17
1 files changed, 17 insertions, 0 deletions
diff --git a/tw/home.scm b/tw/home.scm
index 3c957105..6968ae98 100644
--- a/tw/home.scm
+++ b/tw/home.scm
@@ -87,6 +87,23 @@ auto-expand-secmem
;; With #:recursive? #t, Guix keeps the files' permission bits, i.e. makes them executable.
`((".local/bin/ppscm" ,(local-file "home/files/ppscm" #:recursive? #t)))) ; pretty-print scheme files
+ (simple-service 'cern-ci-environment home-environment-variables-service-type
+ ;; Nomad, Consul, Vault
+ ;; Tokens are not defined here as they are stored in pass(1).
+ ;; Shell aliases to use tokens are defined in zshrc.
+ '(("NOMAD_ADDR" . "https://alinomad.cern.ch:443")
+ ("NOMAD_CACERT" . "${XDG_CONFIG_HOME}/cern-ca-bundle.crt")
+ ("NOMAD_CLIENT_CERT" . "${XDG_CONFIG_HOME}/grid-personal-cert.pem")
+ ("NOMAD_CLIENT_KEY" . "${XDG_CONFIG_HOME}/grid-personal-key.pem")
+ ("CONSUL_HTTP_ADDR" . "https://aliconsul.cern.ch:443")
+ ("CONSUL_CACERT" . "${XDG_CONFIG_HOME}/cern-ca-bundle.crt")
+ ("CONSUL_CLIENT_CERT" . "${XDG_CONFIG_HOME}/grid-personal-cert.pem")
+ ("CONSUL_CLIENT_KEY" . "${XDG_CONFIG_HOME}/grid-personal-key.pem")
+ ("VAULT_ADDR" . "https://alivault.cern.ch:443")
+ ("VAULT_CACERT" . "${XDG_CONFIG_HOME}/cern-ca-bundle.crt")
+ ("VAULT_CLIENT_CERT" . "${XDG_CONFIG_HOME}/grid-personal-cert.pem")
+ ("VAULT_CLIENT_KEY" . "${XDG_CONFIG_HOME}/grid-personal-key.pem")))
+
(simple-service 'common-environment home-environment-variables-service-type
`(;; Path to my own package definitions. If invoking `guix home'
;; afresh, this needs to be set manually to find these packages.