Merge pull request #195190 from Ma27/coturn-replace-secret

nixos/coturn: refactor secret injection
2022-10-09 13:48:49 +02:00 · 2022-10-09 13:48:49 +02:00 · 8a86d9d4aa
commit 8a86d9d4aa
parent 377db224c1 4fd75277dd
1 changed files with 4 additions and 3 deletions
--- a/nixos/modules/services/networking/coturn.nix
+++ b/nixos/modules/services/networking/coturn.nix
@ -335,9 +335,10 @@ in {
        preStart = ''
          cat ${configFile} > ${runConfig}
          ${optionalString (cfg.static-auth-secret-file != null) ''
-            STATIC_AUTH_SECRET="$(head -n1 ${cfg.static-auth-secret-file} || :)"
-            sed -e "s,#static-auth-secret#,$STATIC_AUTH_SECRET,g" \
-              -i ${runConfig}
+            ${pkgs.replace-secret}/bin/replace-secret \
+              "#static-auth-secret#" \
+              ${cfg.static-auth-secret-file} \
+              ${runConfig}
          '' }
          chmod 640 ${runConfig}
        '';