diff --git a/modules/nixos/services/opencloud/default.nix b/modules/nixos/services/opencloud/default.nix index 82a4fd9..9c415ee 100755 --- a/modules/nixos/services/opencloud/default.nix +++ b/modules/nixos/services/opencloud/default.nix @@ -14,7 +14,7 @@ in port = service.ports.port0; address = localhost; stateDir = "/var/lib/${service.name}"; - environmentFile = config.sops.secrets."${service.name}-pass".path; + environmentFile = config.sops.secrets."${service.name}/env".path; }; caddy = { virtualHosts = { @@ -44,11 +44,11 @@ in secrets = builtins.listToAttrs ( map (secret: { - name = "${service.name}-${secret}"; + name = "${service.name}/${secret}"; value = sopsPath secret; }) [ - "pass" + "env" ] ); }; diff --git a/secrets/secrets.yaml b/secrets/secrets.yaml index 4b8e758..88e1e7e 100755 --- a/secrets/secrets.yaml +++ b/secrets/secrets.yaml @@ -47,7 +47,8 @@ kanboard-smtp: ENC[AES256_GCM,data:eOIEGwJZlvbJaTfDRU3IFQ==,iv:Jex01WlHG3uxqUnTS podgrab-pass: ENC[AES256_GCM,data:DVmJDb4VqcZDKNcedSaRA5dqKOzx1tSzDiK3i23+a6v3nK+4Kh7n8EA=,iv:SiiUjJLHkCOO1VKCmubftKx06laFqNv79tIPnkVYrJU=,tag:kdkT+03DemlNAsuzps8fnw==,type:str] firefly-iii-key: ENC[AES256_GCM,data:tLJfwB8De1vdGeccr4SxifU7KYAfnasoXISvz5mSR28=,iv:vknG+h2D04lECHE/PPA53aZqWk4ouYcH+WfP7WooPYU=,tag:HKma2cydw58pAnvOFH53fA==,type:str] firefly-iii-pass: ENC[AES256_GCM,data:eJwIM4YHnXTqTOUfU/0CKMSS534VEZIxkBviI1pd7R4=,iv:pUv8ok5nLDGeCcP2hsTculk+MPPAjkupidQO0Jkc3Wc=,tag:zq7+lFjdOr5ORpthqXW8EA==,type:str] -opencloud-pass: ENC[AES256_GCM,data:5jvia3t/s1B38rbPn9z+AxIGuoKXYQxf6uXCsrKBQgIRgXtp5R+yFa7u3IpFpIQ=,iv:rPHUqr988mtCBYgzhLzhnv79UbDrkAHnj57gaAxGXP8=,tag:hDXdUkRITU7lmC0hV1071A==,type:str] +opencloud: + env: ENC[AES256_GCM,data:Mqs1QfUW9+ApD7YfAWKE5r6gsCK4i5CUAqGRRg7C3ZrFXWXEVDNumPV18hpSMLfftIxNHw35nz9PuXiNrdPASt7rO1PXgNSCfKDHe3vSV4TT20OfhsL4HKN6CI8hzsdbqvGLo572SoDNK6Obmg==,iv:TbSrRUlaojl4RrfouwN07MEIz32dl9S0k9B0v2Cqb84=,tag:/QeqnQaruwQcy9ppELCZEg==,type:str] sops: age: - recipient: age19dpncsdphdt2tmknjs99eghk527pvdrw0m29qjn2z2gg3et5tdtqycqhl0 @@ -59,7 +60,7 @@ sops: bXBOa1VSakoyaWxpODJEOU11QUZCaUEK8Ch9Ten3DdrPHF1DTH2qei85AlHUOaLD aNfzakake7ej+MxJYdKEU0bcWofNMKzIlZa2uM10KZSENDP8d8qlig== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-07-07T21:10:16Z" - mac: ENC[AES256_GCM,data:3hp1i12elk70IzRGpgAB0SO6a5OVNLLUL2u863D0KVySPu+spYfC0f659FCfwsDAfu3MFQHiNFjXyyMuV9w2HYejcw5D1cakbkWaUnEOcqofz5Jn7pby29ilOzYmtqIt35aynSdXzM335CWomlvtETnXMpFoAqUHrdQ26dt2lvw=,iv:a/CBmA3RnwKeKZOz+HRWOykiumQfphvrHAMkCT7OKBM=,tag:s1FCJrjdYqZtb9yZxspPMA==,type:str] + lastmodified: "2025-07-07T21:59:57Z" + mac: ENC[AES256_GCM,data:KSpETXFgHhWNUwHZH/0Tk4TSLfFqBPe0Pu3IdJYFszwA1nFKsR3uI6t3Jd7pNEobd2vDfCSgId3rtQbqn4nl3Sh5AcNAl3lmlH2lu3WhgdKlS9uPWcCijwIt4bZ/C+oVnQg99Dj+tdSWgVlp8eZ58eOmiDTHXQNy1ME5GItfv8o=,iv:Sud4CG4o2r8MsCPK3htsXK3rF/X0Y4TVbQs7b0QNsHQ=,tag:z5p6UujhgZ0vaD/Th7yJ1A==,type:str] unencrypted_suffix: _unencrypted version: 3.10.2