alexion/dev
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

refactor(nixos): inline RomM secret names

Browse Source
This commit is contained in:
alexion
2026-10-19 23:28:54 -04:00
parent 762a619553
commit a97a409c8e
1 changed files with 19 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

36
configs/nixos/guests/romm.nix
View File

@@ -7,14 +7,6 @@ let
cfg = config.guests.romm; cfg = config.guests.romm;
rommUid = config.registry."stable-uid".${config.networking.hostName}.romm; rommUid = config.registry."stable-uid".${config.networking.hostName}.romm;
redisUid = config.registry."stable-uid".${config.networking.hostName}."redis-romm"; redisUid = config.registry."stable-uid".${config.networking.hostName}."redis-romm";
secrets = {
igdbClientId = "services/romm/igdb/client-id";
igdbClientSecret = "services/romm/igdb/client-secret";
retroAchievementsApiKey = "services/romm/retroachievements/api-key";
screenScraperUser = "services/romm/screenscraper/user";
screenScraperPassword = "services/romm/screenscraper/password";
steamGridDbApiKey = "services/romm/steamgriddb/api-key";
};
in in
{ {
options.guests.romm = { options.guests.romm = {
@@ -158,21 +150,31 @@ in
}; };
}; };
sops.secrets = lib.genAttrs (builtins.attrValues secrets) (_: { sops.secrets =
sopsFile = ../secrets + "/${config.networking.hostName}.yaml"; lib.genAttrs
}); [
"services/romm/igdb/client-id"
"services/romm/igdb/client-secret"
"services/romm/retroachievements/api-key"
"services/romm/screenscraper/user"
"services/romm/screenscraper/password"
"services/romm/steamgriddb/api-key"
]
(_: {
sopsFile = ../secrets + "/${config.networking.hostName}.yaml";
});
sops.templates."romm.env" = { sops.templates."romm.env" = {
owner = "root"; owner = "root";
group = "storage"; group = "storage";
mode = "0440"; mode = "0440";
content = '' content = ''
IGDB_CLIENT_ID=${config.sops.placeholder.${secrets.igdbClientId}} IGDB_CLIENT_ID=${config.sops.placeholder."services/romm/igdb/client-id"}
IGDB_CLIENT_SECRET=${config.sops.placeholder.${secrets.igdbClientSecret}} IGDB_CLIENT_SECRET=${config.sops.placeholder."services/romm/igdb/client-secret"}
SCREENSCRAPER_USER=${config.sops.placeholder.${secrets.screenScraperUser}} SCREENSCRAPER_USER=${config.sops.placeholder."services/romm/screenscraper/user"}
SCREENSCRAPER_PASSWORD=${config.sops.placeholder.${secrets.screenScraperPassword}} SCREENSCRAPER_PASSWORD=${config.sops.placeholder."services/romm/screenscraper/password"}
RETROACHIEVEMENTS_API_KEY=${config.sops.placeholder.${secrets.retroAchievementsApiKey}} RETROACHIEVEMENTS_API_KEY=${config.sops.placeholder."services/romm/retroachievements/api-key"}
STEAMGRIDDB_API_KEY=${config.sops.placeholder.${secrets.steamGridDbApiKey}} STEAMGRIDDB_API_KEY=${config.sops.placeholder."services/romm/steamgriddb/api-key"}
''; '';
}; };
}; };