Add bucket policies
Eelco Dolstra committed
Mar 3, 2016 at 18:50 UTC
ae97ec370ff68117263a3667224fbafb57c36ff3
1 file changed
+50
nixos-org/network.nix
+50
@@ -49,6 +49,56 @@ in
49
'';
50
};
51
52
+ resources.s3Buckets.nix-cache =
53
+ { config, ... }:
54
+ { inherit accessKeyId;
55
+ region = "us-east-1";
56
+ name = "nix-cache";
57
+ policy =
58
+ ''
59
+ {
60
+ "Version": "2008-10-17",
61
+ "Statement": [
62
+ {
63
+ "Sid": "AllowPublicRead",
64
+ "Effect": "Allow",
65
+ "Principal": {"AWS": "*"},
66
+ "Action": ["s3:GetObject"],
67
+ "Resource": ["${config.arn}/*"]
68
+ }
69
+ ]
70
+ }
71
+ '';
72
+ };
73
+
74
+ resources.s3Buckets.nix-test-cache =
75
+ { config, ... }:
76
+ { inherit region accessKeyId;
77
+ name = "nix-test-cache";
78
+ policy =
79
+ ''
80
+ {
81
+ "Version": "2008-10-17",
82
+ "Statement": [
83
+ {
84
+ "Sid": "AllowPublicRead",
85
+ "Effect": "Allow",
86
+ "Principal": {"AWS": "*"},
87
+ "Action": ["s3:GetObject"],
88
+ "Resource": ["${config.arn}/*"]
89
+ },
90
+ {
91
+ "Sid": "AllowPublicList",
92
+ "Effect": "Allow",
93
+ "Principal": {"AWS": "*"},
94
+ "Action": ["s3:ListBucket"],
95
+ "Resource": ["${config.arn}"]
96
+ }
97
+ ]
98
+ }
99
+ '';
100
+ };
101
+
102
webserver =
103
{ config, pkgs, resources, ... }:
104