alexion/dev
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

refactor(nixos): make navidrome secret names options

Browse Source
This commit is contained in:
alexion
2026-09-12 21:15:17 -04:00
parent fa918d4476
commit 262d92876b
1 changed files with 16 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
configs/nixos/guests/navidrome.nix
View File

@@ -6,9 +6,6 @@
let let
guestCfg = config.guests.navidrome; guestCfg = config.guests.navidrome;
serviceCfg = config.containers.navidrome.config.modules.services.navidrome; serviceCfg = config.containers.navidrome.config.modules.services.navidrome;
lastfmApiKeySecret = "services/navidrome/lastfm/api-key";
lastfmSecretSecret = "services/navidrome/lastfm/secret";
hostSecrets = ../secrets + "/${config.networking.hostName}.yaml";
in in
{ {
options.guests.navidrome = { options.guests.navidrome = {
@@ -25,6 +22,18 @@ in
example = "/srv/music"; example = "/srv/music";
description = "Host path mounted as Navidrome's library folder."; description = "Host path mounted as Navidrome's library folder.";
}; };
lastfmApiKeySecret = lib.mkOption {
type = lib.types.str;
default = "services/navidrome/lastfm/api-key";
description = "SOPS secret name containing the Navidrome Last.fm API key.";
};
lastfmSecretSecret = lib.mkOption {
type = lib.types.str;
default = "services/navidrome/lastfm/secret";
description = "SOPS secret name containing the Navidrome Last.fm secret.";
};
}; };
config = lib.mkIf guestCfg.enable { config = lib.mkIf guestCfg.enable {
@@ -69,8 +78,8 @@ in
}; };
sops.secrets = { sops.secrets = {
${lastfmApiKeySecret}.sopsFile = hostSecrets; ${guestCfg.lastfmApiKeySecret}.sopsFile = ../secrets + "/${config.networking.hostName}.yaml";
${lastfmSecretSecret}.sopsFile = hostSecrets; ${guestCfg.lastfmSecretSecret}.sopsFile = ../secrets + "/${config.networking.hostName}.yaml";
}; };
sops.templates."navidrome.env" = { sops.templates."navidrome.env" = {
@@ -78,8 +87,8 @@ in
group = "storage"; group = "storage";
mode = "0440"; mode = "0440";
content = '' content = ''
ND_LASTFM_APIKEY=${config.sops.placeholder.${lastfmApiKeySecret}} ND_LASTFM_APIKEY=${config.sops.placeholder.${guestCfg.lastfmApiKeySecret}}
ND_LASTFM_SECRET=${config.sops.placeholder.${lastfmSecretSecret}} ND_LASTFM_SECRET=${config.sops.placeholder.${guestCfg.lastfmSecretSecret}}
''; '';
}; };
}; };