❄️ Dotfiles for our NixOS system configuration.

chore(services:destiny-labeler): use environmentFiles for secret key ig

Chloe 1899e9c5 addafb83

Changed files
+14 -16
secrets
services
destiny-labeler
+12 -14
secrets/destiny-labeler.age
···
-----BEGIN AGE ENCRYPTED FILE-----
-
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IGN2U2dKQSBKUEJG
-
S1RtWkR6aVZuUmtWci9tTy90L05ZbDZTbTZGaTZWeGJsVWRoQzNBCkd5cFlEYTVJ
-
QVlzRTlidEJFallZTmMzTERLelNDaWZQM25aeVdnWTBVUTAKLT4gc3NoLWVkMjU1
-
MTkgMUNUOTd3IG1XUHJ5NWk4UUk4Szc1TStxWnZCV1hiQ0JVMDB3OFV3eWZWM2Jj
-
ZkZNU2sKOTBnZFFSYUovNFhxK21vL1cvY0FkMmlpeGJDZ0NGdWlWTElnL2MyTGFY
-
SQotPiBzc2gtZWQyNTUxOSBlUDNUdFEgRjJmT1VCTVVjZk9MK0RMb3ByU1I0N2dk
-
MkZQamVxdXBKL0gvR2JMaFJ6cwpnUkxrbDUweVg5c1FTdHZJbWsyWTdRNVo4U205
-
amNsM3FNZEYrVVoranF3Ci0+IFspby4tZ3JlYXNlIG08I1tJOCBlI3dNXHUgMmAo
-
czdZQwpCZVRBV1J1MDZWTjBhR3FlNlVyOGZ4SmYwcndpQUZXQlRSQkI0bzhnUTVt
-
MzQ0ZTdtTlJKR2FBM00wNUhzbExhCmxFMlBnVm5SaEVyZnoyTGJUYVJ2QTI4Y3E1
-
a3dOZU85a1lYaTRxZjdtWUdXdi9nL29peGZKdWRTeEtsOQotLS0gcTBWZlZKOG8y
-
NW9LZmUrTWFLR3NKbEV0ZnlKNDYzNnhTWmx1Y0w4VnVmcwo6/NlBNJ3sHF7etQ0r
-
K1VzsO6xG9dSwdp5Wj2+PCkqEq8Knd9xEePLw4/hd47pz8JKjaKFhZdo8+QleyyI
-
ovi4czrf8Jc/X75TDASjLIf51EZ0l74en2n8nRPLusuvb8rO
+
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IGN2U2dKQSBoNkJV
+
T04yWG9PbFdmRGc0bUhNaU4yTGl2S0lDZERlZ2FYbGNKSFdqMmkwCmdqVzlRYVhJ
+
NmN1VWYrbklIbFVvVUcxSHJnL09ydUVUV2tmaURVMUpKZ2sKLT4gc3NoLWVkMjU1
+
MTkgMUNUOTd3IFMvcVFvQ2M3UUpIZEdkRmtrSUtLaGZscHl0WGM2WFpjMlBPRlN1
+
K1p1MkkKYXg3d04weWdqRGY4RWJtdGZLUytvM1dQanBxVm4zUm91TXFDNjFhNDZk
+
dwotPiBzc2gtZWQyNTUxOSBlUDNUdFEgRUUxWVNLUDR3aVZUbENPai9LclhZTzZS
+
SDJjbDUyeXhqemdxWWlzdHZBSQpTMnhLWXp4MTE1eDVmUVoxYXNUZ2JrSWlFNGtr
+
NklWbmhCcWIxTzZEcEdFCi0+IDxsVypbQjJELWdyZWFzZSB5SnNuYGNjCjRDaXlC
+
cWdLd1EKLS0tIElObUx3SldVcTdtcVozc3A3Q0FROWZlV2JWckFESHBzQTVlNjlH
+
VEJ3YVUKWFcj2Hf3rGa7+aiJKUktkdOmVRF2c7VgKajt/EC3Z61jnMn9rMPWf9ZE
+
PlsfqBNOlLOiLfdEQnrwC3t2ajETUExrjUUhZ3n23rFT7SzB8giiDXEg9r6pV6Vk
+
aevt9JaLH123SxZURnkTJQ==
-----END AGE ENCRYPTED FILE-----
+2 -2
services/destiny-labeler/default.nix
···
{ config, ... }:
{
-
systemd.tmpfiles.rules = [
"d /var/lib/destiny-labeler/data 0755 root root -"
"f /var/lib/destiny-labeler/data/cursor.txt 0644 root root -"
···
"f /var/lib/destiny-labeler/data/labels.db-shm 0644 root root -"
"f /var/lib/destiny-labeler/data/labels.db-wal 0644 root root -"
];
+
age.secrets.destiny-labeler = {
file = ../../secrets/destiny-labeler.age;
mode = "600";
···
ports = [ "4001:4001" ];
environment = {
DID = "did:plc:zt2oycjggn5gwdtcgphdh4tn";
-
SIGN_KEY = config.age.secrets.destiny-labeler.path;
URL = "wss://jetstream.atproto.tools/subscribe";
NODE_ENV = "production";
};
+
environmentFiles = [ config.age.secrets.destiny-labeler.path ];
volumes = [
"/var/lib/destiny-labeler/data/cursor.txt:/app/cursor.txt"
"/var/lib/destiny-labeler/data/labels.db:/app/labels.db"