From 6d6009a4e9d4826b540c0cb5e3d44ba555c9d012 Mon Sep 17 00:00:00 2001
From: Nydragon <contact@ccnlc.eu>
Date: Tue, 1 Oct 2024 20:02:31 +0200
Subject: [PATCH] feat: add navidrome secret key

---
 flake.lock            |   8 ++++----
 flake.nix             |   3 ++-
 options/navidrome.nix |   4 ++++
 secrets/navidrome.age | Bin 0 -> 748 bytes
 secrets/secrets.nix   |   4 +++-
 5 files changed, 13 insertions(+), 6 deletions(-)
 create mode 100644 secrets/navidrome.age

diff --git a/flake.lock b/flake.lock
index 861cd0e..f0739c1 100644
--- a/flake.lock
+++ b/flake.lock
@@ -455,11 +455,11 @@
         "quickshell": "quickshell"
       },
       "locked": {
-        "lastModified": 1727486385,
-        "narHash": "sha256-+zKlAyVmmHkvdN5VpOAv7U5/SWY4JR/ZJjUscjHRLc0=",
+        "lastModified": 1727571386,
+        "narHash": "sha256-bk34Wr2VjFb+3CFATI3zzCkRa2wtDxFFgkMkNhRx5GI=",
         "ref": "refs/heads/main",
-        "rev": "6cd1de8984c7544b4c43b88c9aa4ca61fde1f229",
-        "revCount": 49,
+        "rev": "5309cf0de60bbcf2be5d75ccb2fc31d499525daa",
+        "revCount": 53,
         "type": "git",
         "url": "https://codeberg.org/nydragon/nysh"
       },
diff --git a/flake.nix b/flake.nix
index 84851e4..48de153 100644
--- a/flake.nix
+++ b/flake.nix
@@ -58,7 +58,7 @@
       ];
 
       perSystem =
-        { pkgs, ... }:
+        { pkgs, inputs', ... }:
         {
           formatter = pkgs.nixfmt-rfc-style;
           devShells.default = pkgs.mkShell {
@@ -67,6 +67,7 @@
               nixfmt-rfc-style
               nodePackages.prettier
               typos
+              inputs'.agenix.packages.default
             ];
             shellHook = ''
               ${pkgs.pre-commit}/bin/pre-commit install -f
diff --git a/options/navidrome.nix b/options/navidrome.nix
index 1f832a2..6b421e1 100644
--- a/options/navidrome.nix
+++ b/options/navidrome.nix
@@ -62,5 +62,9 @@ in
         MusicFolder = cfg.library.path;
       } // cfg.settings;
     };
+
+    systemd.services.navidrome.serviceConfig = {
+      EnvironmentFile = config.age.secrets.navidrome.path;
+    };
   };
 }
diff --git a/secrets/navidrome.age b/secrets/navidrome.age
new file mode 100644
index 0000000000000000000000000000000000000000..eedc7ef60337acce246944fcf4bf921d00766ea4
GIT binary patch
literal 748
zcmZY2-AfYz008jRhiuV&jKFY~VX@Zj_T?_9xZSqf$L;(3Eb6x1?zX$_w!7Qzb|8dF
zAfgaH2qtCN7v<0%A}lP6py(k@N|S<!5`FL?f(WdK-tG4f{0NHFk);e@FN=Aubb{k4
zpa!aRr!|5=>&UFZYz84sIxpc#Ny8FU(P%^x#fmIhIIo2S<a!8}xM+woMj$RgJH(`3
zHpfE=NfmYmaNH_80zRudkt^rpG*-{!l#i*oBY=VSTLdU+lAw}}<o?@?E;a~jT;;Gr
z*YXl*u8MXsYR>{TMGB;OCXq!7ek>}oM9gF*fM_hGViHi*iFq7K783lZAyhPaj3}&d
z{v6FI2tc!>sF;ER#`=VvTP7Q;#3)TJ2ijQ&RbeHsg7aX>Ud5cwR1}IkEg6NNGn6gt
z4j{bflVd6x_KSJmAoH=FQV+@qs8)n22H<5Zn9Ndg-D6frkzj+adS>TFfHWmh8jDB7
z#auxP2P{4&t=Gp>Sq3uoaNcSduNwWns++cBQKwgkz$!B@*pjX&E!RjAGucBG-i4$B
zk$Bx)l@ZW`lv9{CTF&M<)T+|ybQ(Q?i8yMcQx;Asi4K%js02}RvPA$)>vLRDw3*8!
zABzBmkm}s$*xaRc>(Q%k#;~a=yl(_O3pF~4pVt$}Uqila{(VH8THg;RR?^EGSHAXd
z-5QGT-EBSerPQ0bG2{6#-SHi1T3Xqj?=BCyJ6bnxv&{5zW*|P=x2JKhrMWPCr@L))
zaA|dO$TxZSWBc5v=B^|A(Bp%;Yb^ug5AHWYXVz+P_~az^yZdH)?o<KPES?t(Gqcu(
z@XNOT$;N>N<np(!)m;;h)J;qWv88=GHesLoC1A7f)Y97Mv*BLy$-|LR_4+X|QojIP
kw6{18`qb{%txwB?e-201nmdQbUOax~{_%X98(&2J0lyO%mH+?%

literal 0
HcmV?d00001

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index af512cb..46d0481 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -2,14 +2,16 @@ let
   raptus = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKdpjGR/pV1roktZdKIVVWqds0JB+x1ksfyQmYPMLK7o";
   marr = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILMh2nUUKt3xsKiwZUuo6HgvR3lr7rRAl0SOH/502sFP";
   brontes = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICgknH3OPazZNhH5xkYfXBcYpI3TXj/eRp0/zzjtVJBf";
-
+  shan = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPnASO1+h9tUYsNrsePcmxFLpKBkyCXbcZB9W7f5Yt5U";
   devices = [
     marr
     raptus
     brontes
+    shan
   ];
 in
 {
   "couchdb.age".publicKeys = devices;
   "rustypaste.age".publicKeys = devices;
+  "navidrome.age".publicKeys = devices;
 }