From 4dda24d573daa349f4bb1d400a1e0e423876df77 Mon Sep 17 00:00:00 2001
From: Martin Fischer <martin@push-f.com>
Date: Sun, 14 Dec 2025 20:57:54 +0100
Subject: refactor: move host-specific secrets to host dirs

---
 nixos/hosts/ev/miniflux.nix                               |   2 +-
 nixos/hosts/ev/secrets/miniflux-admin.age                 |   9 +++++++++
 nixos/hosts/tente/grafana.nix                             |   2 +-
 .../hosts/tente/secrets/grafana-matrix-forwarder-env.age  | Bin 0 -> 449 bytes
 4 files changed, 11 insertions(+), 2 deletions(-)
 create mode 100644 nixos/hosts/ev/secrets/miniflux-admin.age
 create mode 100644 nixos/hosts/tente/secrets/grafana-matrix-forwarder-env.age

(limited to 'nixos/hosts')

diff --git a/nixos/hosts/ev/miniflux.nix b/nixos/hosts/ev/miniflux.nix
index 5bf1ccd..73bdf98 100644
--- a/nixos/hosts/ev/miniflux.nix
+++ b/nixos/hosts/ev/miniflux.nix
@@ -11,7 +11,7 @@ in
   };
 
   config = {
-    age.secrets.miniflux-admin.file = <top/secrets/miniflux-admin.age>;
+    age.secrets.miniflux-admin.file = ./secrets/miniflux-admin.age;
 
     services.miniflux = {
       enable = true;
diff --git a/nixos/hosts/ev/secrets/miniflux-admin.age b/nixos/hosts/ev/secrets/miniflux-admin.age
new file mode 100644
index 0000000..b656b07
--- /dev/null
+++ b/nixos/hosts/ev/secrets/miniflux-admin.age
@@ -0,0 +1,9 @@
+age-encryption.org/v1
+-> ssh-ed25519 PMTW+A CIjI5374KCn9hZRM6vj4PTcUj4FzHan/buPBD5gQmw8
+6mXVcux6zZQ16U1y3bipsKD4y1QiMQ498IQAzpDJqt0
+-> ssh-ed25519 PHC5tQ IQiEl8meNDHIE0HI2SErDxFDVSEd/TCRH5PplnIC9H4
+mq/N57ex2NpbptzaMpAfYJ1Y/exIj1+J2X9CRW28aOg
+-> e#-grease TdfbQVa$ L X4("^:7K V&L1z
+cHZi1Yyb7tz7gw9zkPqbbhEZeGVIncPZfTpIvch0e/wDCIjMxY7e2Pb6nOVDxQ
+--- b32AUhCBWDVXlj4pUbDW91Y80nQ5Wp9zTy+rl6vnFHU
+A��5�'`�e�YZ%Fd�k�*�&8I���Be@A����a�[��/�{�e���E�u<)>��I�t��M�Y};�b
\ No newline at end of file
diff --git a/nixos/hosts/tente/grafana.nix b/nixos/hosts/tente/grafana.nix
index f7c8789..a2ea9b9 100644
--- a/nixos/hosts/tente/grafana.nix
+++ b/nixos/hosts/tente/grafana.nix
@@ -26,7 +26,7 @@ in
   ];
 
   config = {
-    age.secrets.grafana-matrix-forwarder-env.file = <top/secrets/grafana-matrix-forwarder-env.age>;
+    age.secrets.grafana-matrix-forwarder-env.file = ./secrets/grafana-matrix-forwarder-env.age;
 
     services.grafana = {
       enable = true;
diff --git a/nixos/hosts/tente/secrets/grafana-matrix-forwarder-env.age b/nixos/hosts/tente/secrets/grafana-matrix-forwarder-env.age
new file mode 100644
index 0000000..84cab14
Binary files /dev/null and b/nixos/hosts/tente/secrets/grafana-matrix-forwarder-env.age differ
-- 
cgit v1.3.1