Reference the secret in hedgedoc service

srid · Jun 21, 2024 · 8f6dd1d · 8f6dd1d
1 parent 3a21580
commit 8f6dd1d
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/nixos/hedgedoc.nix b/nixos/hedgedoc.nix
@@ -1,13 +1,18 @@
+{ config, ... }:
+
 let
   domain = "pad.srid.ca";
   port = 9112;
 in
 {
+  age.secrets."hedgedoc.env" = {
+    file = ../secrets/hedgedoc.env.age;
+    owner = "hedgedoc";
+  };
   services.hedgedoc = {
     enable = true;
 
-    # GitHub secrets set in colmena (see flake.nix)
-    environmentFile = "/run/keys/hedgedoc.env";
+    environmentFile = config.age.secrets."hedgedoc.env".path;
 
     settings = {
       # URL config