style(nixos): inline navidrome secret mount path
This commit is contained in:
@@ -5,7 +5,6 @@
|
|||||||
}:
|
}:
|
||||||
let
|
let
|
||||||
serviceConfig = config.containers.navidrome.config.modules.services.navidrome;
|
serviceConfig = config.containers.navidrome.config.modules.services.navidrome;
|
||||||
envFile = "/run/secrets/navidrome.env";
|
|
||||||
lastfmApiKeySecret = "services/navidrome/lastfm/api-key";
|
lastfmApiKeySecret = "services/navidrome/lastfm/api-key";
|
||||||
lastfmSecretSecret = "services/navidrome/lastfm/secret";
|
lastfmSecretSecret = "services/navidrome/lastfm/secret";
|
||||||
hostSecrets = ../secrets + "/${config.networking.hostName}.yaml";
|
hostSecrets = ../secrets + "/${config.networking.hostName}.yaml";
|
||||||
@@ -55,7 +54,7 @@ in
|
|||||||
group = "storage";
|
group = "storage";
|
||||||
mode = "2770";
|
mode = "2770";
|
||||||
};
|
};
|
||||||
${envFile} = {
|
${"/run/secrets/navidrome.env"} = {
|
||||||
file = config.sops.templates."navidrome.env".path;
|
file = config.sops.templates."navidrome.env".path;
|
||||||
readOnly = true;
|
readOnly = true;
|
||||||
};
|
};
|
||||||
|
|||||||
Reference in New Issue
Block a user