about summary refs log tree commit diff
path: root/systems/cobalt/default.nix
diff options
context:
space:
mode:
authorsefidel <contact@sefidel.net>2023-04-04 22:18:34 +0900
committersefidel <contact@sefidel.net>2023-04-04 22:18:34 +0900
commitba2f957f393596b4a569d2880a93ddb497163aa4 (patch)
tree4b2ecfd6702e2b1d75886ac09657540a65d3c0b8 /systems/cobalt/default.nix
parentce06f43476863da90dc60dcee606d2b6c5a89a8e (diff)
downloadinfra-ba2f957f393596b4a569d2880a93ddb497163aa4.tar.gz
infra-ba2f957f393596b4a569d2880a93ddb497163aa4.zip
feat(services/grafana): use proper secrets
Diffstat (limited to 'systems/cobalt/default.nix')
-rw-r--r--systems/cobalt/default.nix2
1 files changed, 2 insertions, 0 deletions
diff --git a/systems/cobalt/default.nix b/systems/cobalt/default.nix
index 0a5cfe0..f369fec 100644
--- a/systems/cobalt/default.nix
+++ b/systems/cobalt/default.nix
@@ -134,6 +134,7 @@ in
     bsd-finger
   ];
 
+  sops.secrets.grafana-admin-pass = { owner = "grafana"; };
   sops.secrets.acme-envs = {
     owner = "acme";
   };
@@ -154,6 +155,7 @@ in
       enable = true;
       domain = "status.exotic.sh";
       tls.acmeHost = "exotic.sh";
+      secrets.adminPassword = config.sops.secrets.grafana-admin-pass.path;
     };
 
     services.coredns.enable = false;