Migrate to flakes

modules/datasync.nix

@@ -6,6 +6,7 @@
     openDefaultPorts = true;
     guiAddress = "0.0.0.0:8384";
     dataDir = "/vault/syncthing";
+    key = config.age.secrets.syncthing.path;
     devices = {
       panacea.id =
         "NF4SYEJ-RSGPDEF-CDEYC3A-JWZMKNC-KG4FVQP-CZ5HRFY-XM22BZD-N7B6VAH";

modules/devops.nix

@@ -7,7 +7,7 @@
     rootUrl = "https://git.coolneng.duckdns.org";
     database = {
       type = "postgres";
-      passwordFile = "/var/keys/gitea";
+      passwordFile = config.age.secrets.gitea.path;
     };
     cookieSecure = true;
     disableRegistration = true;

modules/information.nix

@@ -4,7 +4,7 @@
   # Miniflux configuration
   services.miniflux = {
     enable = true;
-    adminCredentialsFile = "/var/keys/miniflux";
+    adminCredentialsFile = config.age.secrets.miniflux.path;
     config = {
       BASE_URL = "https://rss.coolneng.duckdns.org";
       RUN_MIGRATIONS = "1";

modules/networking.nix

@@ -41,7 +41,7 @@ in {
     quiet = true;
     protocol = "duckdns";
     domains = [ "coolneng.duckdns.org" ];
-    passwordFile = "/var/keys/ddclient";
+    passwordFile = config.age.secrets.ddclient.path;
   };
 
   # Firewall configuration
@@ -73,7 +73,7 @@ in {
     wg0 = {
       ips = [ "10.8.0.1/24" ];
       listenPort = wireguard_port;
-      privateKeyFile = "/home/coolneng/.wg/keys/privatekey";
+      privateKeyFile = config.age.secrets.wireguard.path;
       peers = [
         # panacea
         {