From 50b8027b9e4acb70b637cefd6c8922e32a3fca37 Mon Sep 17 00:00:00 2001
From: Linnnus <linnnus@users.noreply.github.com>
Date: Sat, 30 Sep 2023 12:35:11 +0200
Subject: Add duksebot service

---
 services/duksebot/default.nix | 10 ++++------
 1 file changed, 4 insertions(+), 6 deletions(-)

(limited to 'services/duksebot/default.nix')

diff --git a/services/duksebot/default.nix b/services/duksebot/default.nix
index f05202c..7e7a3f7 100644
--- a/services/duksebot/default.nix
+++ b/services/duksebot/default.nix
@@ -28,11 +28,9 @@ in
     };
     users.groups.duksebot = { };
 
-    my.secrets.duksebot = {
-      source = ./secrets.env;
-      dest = "/run/keys/duksebot.env";
-      owner = "duksebot";
-      group = "duksebot";
+    age.secrets.duksebot-env = {
+      file = ../../secrets/duksebot.env.age;
+      # TODO: configure permissions
     };
 
     # Create a service which simply runs script. This will be invoked by our timer.
@@ -47,7 +45,7 @@ in
       };
       script = ''
         # Load the secret environment variables.
-        export $(grep -v '^#' /run/keys/duksebot.env | xargs)
+        export $(grep -v '^#' ${config.age.secrets.duksebot-env.path} | xargs)
         # Kick off.
         exec "${cfg.package}"/bin/duksebot
       '';
-- 
cgit v1.2.3