diff options
Diffstat (limited to 'services')
| -rw-r--r-- | services/default.nix | 1 | ||||
| -rw-r--r-- | services/duksebot/default.nix | 10 |
2 files changed, 5 insertions, 6 deletions
diff --git a/services/default.nix b/services/default.nix index 458fe4e..995ca27 100644 --- a/services/default.nix +++ b/services/default.nix @@ -8,5 +8,6 @@ imports = [ ./on-demand-minecraft + ./duksebot ]; } diff --git a/services/duksebot/default.nix b/services/duksebot/default.nix index f05202c..7e7a3f7 100644 --- a/services/duksebot/default.nix +++ b/services/duksebot/default.nix @@ -28,11 +28,9 @@ in }; users.groups.duksebot = { }; - my.secrets.duksebot = { - source = ./secrets.env; - dest = "/run/keys/duksebot.env"; - owner = "duksebot"; - group = "duksebot"; + age.secrets.duksebot-env = { + file = ../../secrets/duksebot.env.age; + # TODO: configure permissions }; # Create a service which simply runs script. This will be invoked by our timer. @@ -47,7 +45,7 @@ in }; script = '' # Load the secret environment variables. - export $(grep -v '^#' /run/keys/duksebot.env | xargs) + export $(grep -v '^#' ${config.age.secrets.duksebot-env.path} | xargs) # Kick off. exec "${cfg.package}"/bin/duksebot ''; |