style(nixos): inline navidrome secret mount path

This commit is contained in:
2026-09-12 20:37:54 -04:00
parent 049c7d66df
commit d352e596ff

View File

@@ -5,7 +5,6 @@
}: }:
let let
serviceConfig = config.containers.navidrome.config.modules.services.navidrome; serviceConfig = config.containers.navidrome.config.modules.services.navidrome;
envFile = "/run/secrets/navidrome.env";
lastfmApiKeySecret = "services/navidrome/lastfm/api-key"; lastfmApiKeySecret = "services/navidrome/lastfm/api-key";
lastfmSecretSecret = "services/navidrome/lastfm/secret"; lastfmSecretSecret = "services/navidrome/lastfm/secret";
hostSecrets = ../secrets + "/${config.networking.hostName}.yaml"; hostSecrets = ../secrets + "/${config.networking.hostName}.yaml";
@@ -55,7 +54,7 @@ in
group = "storage"; group = "storage";
mode = "2770"; mode = "2770";
}; };
${envFile} = { ${"/run/secrets/navidrome.env"} = {
file = config.sops.templates."navidrome.env".path; file = config.sops.templates."navidrome.env".path;
readOnly = true; readOnly = true;
}; };