about summary refs log tree commit diff
path: root/nixos
diff options
context:
space:
mode:
authorMaximilian Bosch <maximilian@mbosch.me>2022-11-20 20:03:38 +0100
committerMaximilian Bosch <maximilian@mbosch.me>2022-11-20 20:03:38 +0100
commit4a73fad5155245e66323d422a373e3377da747aa (patch)
tree2fc1d2b0c352355d5021fcc8ec163ea5c3dc5e35 /nixos
parent98cadbcf7004fb103e7e8701c4f496f3b3d6564e (diff)
nixos/doc: also note that external YAML files for grafana will end up in the store
Diffstat (limited to 'nixos')
-rw-r--r--nixos/doc/manual/from_md/release-notes/rl-2211.section.xml7
-rw-r--r--nixos/doc/manual/release-notes/rl-2211.section.md3
2 files changed, 10 insertions, 0 deletions
diff --git a/nixos/doc/manual/from_md/release-notes/rl-2211.section.xml b/nixos/doc/manual/from_md/release-notes/rl-2211.section.xml
index 6044b70a200da..65b3129da7c16 100644
--- a/nixos/doc/manual/from_md/release-notes/rl-2211.section.xml
+++ b/nixos/doc/manual/from_md/release-notes/rl-2211.section.xml
@@ -1308,6 +1308,13 @@ services.github-runner.serviceOverrides.SupplementaryGroups = [
                   non-NixOS Grafana instances that you also want to
                   deploy to NixOS.
                 </para>
+                <para>
+                  <emphasis role="strong">Note:</emphasis> secrets from
+                  these files will be leaked into the store unless you
+                  use a
+                  <link xlink:href="https://grafana.com/docs/grafana/latest/setup-grafana/configure-grafana/#file-provider"><emphasis role="strong">file</emphasis>-provider
+                  or env-var</link> for secrets!
+                </para>
               </listitem>
               <listitem>
                 <para>
diff --git a/nixos/doc/manual/release-notes/rl-2211.section.md b/nixos/doc/manual/release-notes/rl-2211.section.md
index 2593b36912c09..b4b52c0e873b8 100644
--- a/nixos/doc/manual/release-notes/rl-2211.section.md
+++ b/nixos/doc/manual/release-notes/rl-2211.section.md
@@ -426,6 +426,9 @@ Available as [services.patroni](options.html#opt-services.patroni.enable).
       provisioning files from non-NixOS Grafana instances that you also want to
       deploy to NixOS.
 
+      __Note:__ secrets from these files will be leaked into the store unless you use a
+      [**file**-provider or env-var](https://grafana.com/docs/grafana/latest/setup-grafana/configure-grafana/#file-provider) for secrets!
+
     - [](#opt-services.grafana.provision.notifiers) is not affected by this change because
       this feature is deprecated by Grafana and will probably removed in Grafana 10.
       It's recommended to use `services.grafana.provision.alerting.contactPoints` instead.