style(nixos): inline navidrome secret mount path

This commit is contained in:
2026-09-12 20:37:54 -04:00
parent 049c7d66df
commit d352e596ff

View File

@@ -5,7 +5,6 @@
}:
let
serviceConfig = config.containers.navidrome.config.modules.services.navidrome;
envFile = "/run/secrets/navidrome.env";
lastfmApiKeySecret = "services/navidrome/lastfm/api-key";
lastfmSecretSecret = "services/navidrome/lastfm/secret";
hostSecrets = ../secrets + "/${config.networking.hostName}.yaml";
@@ -55,7 +54,7 @@ in
group = "storage";
mode = "2770";
};
${envFile} = {
${"/run/secrets/navidrome.env"} = {
file = config.sops.templates."navidrome.env".path;
readOnly = true;
};