From 3f3b3d06048bc82767180f38e86bb4091ebe66e4 Mon Sep 17 00:00:00 2001
From: Giulio De Pasquale <git@depasquale.giugl.io>
Date: Fri, 6 Dec 2024 20:55:44 +0000
Subject: [PATCH] refactor(teslamate.nix): update secrets file path and add age
 secret configuration

---
 hosts/architect/teslamate.nix |   7 ++++++-
 secrets/secrets.nix           |   3 ++-
 secrets/teslamate.age         | Bin 0 -> 331 bytes
 3 files changed, 8 insertions(+), 2 deletions(-)
 create mode 100644 secrets/teslamate.age

diff --git a/hosts/architect/teslamate.nix b/hosts/architect/teslamate.nix
index ac83bec..b054ea7 100644
--- a/hosts/architect/teslamate.nix
+++ b/hosts/architect/teslamate.nix
@@ -8,6 +8,11 @@ let
   allowWAN = false;
 in
 {
+  age.secrets.teslamate = {
+    file = ../../secrets/teslamate.age;
+    owner = "teslamate";
+  };
+
   architect.vhost.${domain} = with config.architect.networks; {
     dnsInterfaces = [ "lan" "tailscale" ];
     locations = {
@@ -43,7 +48,7 @@ in
     port = teslamatePort;
 
     listenAddress = "127.0.0.1";
-    secretsFile = "/secrets/teslamate/teslamate.env";
+    secretsFile = config.age.secrets.teslamate.path;
     virtualHost = domain;
     postgres.enable_server = true;
     grafana = { enable = true; port = grafanaPort; listenAddress = "127.0.0.1"; urlPath = "/grafana"; };
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 7f2a253..3b9ecfc 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -4,5 +4,6 @@ let
   ];
 in
 {
-  "secrets/matrix-synapse.age".publicKeys = pubkeys;
+  "matrix-synapse.age".publicKeys = pubkeys;
+  "teslamate.age".publicKeys = pubkeys;
 }
diff --git a/secrets/teslamate.age b/secrets/teslamate.age
new file mode 100644
index 0000000000000000000000000000000000000000..7bc5eaa41a295720421a2334462dbd9398cb246f
GIT binary patch
literal 331
zcmV-R0kr;MXJsvAZewzJaCB*JZZ2<fXD@a!3N1b$b8~1dWn?lnH8D9LH)Th0NOvGP
zWJP3eXiZ^5O?h}ybx}@5SXek!IX6gSVQh40R7`VZG&VU!HEmFHX=e&@WH~rOVlihc
zO=?bJIdgMmR&+~lb6GV-aBEXAP)K@fM>A+=Xi;HoNLdOkEiE8%Vs<x6XH7CwM`U+z
zRykvEQY&z8Sw~YrbTm*`LQ_&uXk=9}Xk;=`Nl6O2_(XR2U*Ssd880vR0EH*<utx8C
z9tlC3A~WoWQLX>2Z5X>_s_*?NX|kqe7o)A<Iw$|Wu@3L>T?8EJkPDEhh__}Ruz|HR
zh^1?x7RKO2`sRTXXju~o$B~I(i~vG7^p4C2iy>yN2+TojEj1YLVttBUu1mIR?-<!W
d%@fCQ+fpxh;|o07UX_uIsOH8zc-6{)Wf{_og*E^H

literal 0
HcmV?d00001