fix(nixos): read navidrome secrets from pikachu

This commit is contained in:
2026-09-12 20:14:51 -04:00
parent ba94968330
commit 2edc47fcf1

View File

@@ -7,6 +7,7 @@ let
cfg = config.guests.navidrome; cfg = config.guests.navidrome;
envFile = "/run/secrets/navidrome.env"; envFile = "/run/secrets/navidrome.env";
hasLastfmSecrets = cfg.lastfmApiKeySecret != null && cfg.lastfmSecretSecret != null; hasLastfmSecrets = cfg.lastfmApiKeySecret != null && cfg.lastfmSecretSecret != null;
hostSecrets = ../secrets + "/${config.networking.hostName}.yaml";
in in
{ {
options.guests.navidrome = { options.guests.navidrome = {
@@ -122,8 +123,8 @@ in
}; };
sops.secrets = lib.optionalAttrs hasLastfmSecrets { sops.secrets = lib.optionalAttrs hasLastfmSecrets {
${cfg.lastfmApiKeySecret} = { }; ${cfg.lastfmApiKeySecret}.sopsFile = hostSecrets;
${cfg.lastfmSecretSecret} = { }; ${cfg.lastfmSecretSecret}.sopsFile = hostSecrets;
}; };
sops.templates."navidrome.env" = lib.mkIf hasLastfmSecrets { sops.templates."navidrome.env" = lib.mkIf hasLastfmSecrets {