fix(nixos): read navidrome secrets from pikachu

2026-09-12 20:14:51 -04:00
parent ba94968330
commit 2edc47fcf1
1 changed files with 3 additions and 2 deletions
--- a/configs/nixos/guests/navidrome.nix
+++ b/configs/nixos/guests/navidrome.nix
@@ -7,6 +7,7 @@ let
  cfg = config.guests.navidrome;
  envFile = "/run/secrets/navidrome.env";
  hasLastfmSecrets = cfg.lastfmApiKeySecret != null && cfg.lastfmSecretSecret != null;
+  hostSecrets = ../secrets + "/${config.networking.hostName}.yaml";
 in
 {
  options.guests.navidrome = {
@@ -122,8 +123,8 @@ in
    };

    sops.secrets = lib.optionalAttrs hasLastfmSecrets {
-      ${cfg.lastfmApiKeySecret} = { };
-      ${cfg.lastfmSecretSecret} = { };
+      ${cfg.lastfmApiKeySecret}.sopsFile = hostSecrets;
+      ${cfg.lastfmSecretSecret}.sopsFile = hostSecrets;
    };

    sops.templates."navidrome.env" = lib.mkIf hasLastfmSecrets {