From 8f6dd1dcc50d80d4697c2c6a1c3b37aa9b57df08 Mon Sep 17 00:00:00 2001
From: Sridhar Ratnakumar <srid@srid.ca>
Date: Fri, 21 Jun 2024 19:20:27 -0400
Subject: [PATCH] Reference the secret in hedgedoc service

---
 nixos/hedgedoc.nix | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/nixos/hedgedoc.nix b/nixos/hedgedoc.nix
index 5f80166..91a1a1d 100644
--- a/nixos/hedgedoc.nix
+++ b/nixos/hedgedoc.nix
@@ -1,13 +1,18 @@
+{ config, ... }:
+
 let
   domain = "pad.srid.ca";
   port = 9112;
 in
 {
+  age.secrets."hedgedoc.env" = {
+    file = ../secrets/hedgedoc.env.age;
+    owner = "hedgedoc";
+  };
   services.hedgedoc = {
     enable = true;
 
-    # GitHub secrets set in colmena (see flake.nix)
-    environmentFile = "/run/keys/hedgedoc.env";
+    environmentFile = config.age.secrets."hedgedoc.env".path;
 
     settings = {
       # URL config