Variables Module

Workspace variables with plaintext, computed, and direct secret-reference support.

Overview

Manages project variables as a key-value store. Supports plaintext config, direct ref+sops://...#/KEY secret references, external secret store references (vals), and Nix-computed values.

Files

File	Description
`default.nix`	Module entry point
`variables-options.nix`	Variable schema and keygroup logic
`variables-backend-options.nix`	Backend selection (vals or chamber)

Keygroups

Prefix	Storage	Description
`/var/*`	Plaintext	Shared config
`/secret/*`	Legacy placeholder	Transitional secret entry
`/computed/*`	Read-only	Generated by Nix modules

Usage

stackpanel.variables = {
  "/var/LOG_LEVEL" = { value = "info"; };
  "/var/DATABASE_URL" = {
    value = "ref+sops://.stack/secrets/dev/web.sops.yaml#/DATABASE_URL";
  };
};

Backends

vals (default): AGE/SOPS encryption with vals for external references
chamber: AWS SSM Parameter Store via the chamber CLI